Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 26, 2026, 10:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3571	6.5	警告 Network	Splunk	Splunk AI Toolkit	SplunkのSplunk AI Toolkitにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-20238	2026-05-28 14:33	2026-05-20	Show	GitHub Exploit DB Packet Storm

3572	7.5	重要 Network	NVIDIA	NVIDIA TensorRT	NVIDIAのNVIDIA TensorRTにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-24188	2026-05-28 14:33	2026-05-20	Show	GitHub Exploit DB Packet Storm

3573	5.3	警告 Network	Dropbox	Erlang SAML library	Lexi Wilson (arekinath)等の複数ベンダの製品におけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-28809	2026-05-28 14:33	2026-03-23	Show	GitHub Exploit DB Packet Storm

3574	9.1	緊急 Network	Nexent	Nexent	Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-31215	2026-05-28 14:33	2026-05-12	Show	GitHub Exploit DB Packet Storm

3575	9.1	緊急 Network	Nexent	Nexent	Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-31216	2026-05-28 14:33	2026-05-12	Show	GitHub Exploit DB Packet Storm

3576	9.8	緊急 Network	Nebuly	OptiMate	NebulyのOptiMateにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-31217	2026-05-28 14:33	2026-05-12	Show	GitHub Exploit DB Packet Storm

3577	7.5	重要 Network	Gleam-wisp	Wisp	Gleam-wispのWispにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-32145	2026-05-28 14:33	2026-04-2	Show	GitHub Exploit DB Packet Storm

3578	7.5	重要 Network	Elixir Plug	Plug.cowboy	Elixir PlugのPlug.cowboyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-32688	2026-05-28 14:33	2026-04-27	Show	GitHub Exploit DB Packet Storm

3579	8.8	重要 Network	9bis	KiTTY	KovidgoyalのKittyにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-33633	2026-05-28 14:33	2026-05-19	Show	GitHub Exploit DB Packet Storm

3580	9.8	緊急 Network	9bis	KiTTY	KovidgoyalのKittyにおける複数の脆弱性	CWE-125 CWE-190 CWE-787	CVE-2026-33642	2026-05-28 14:33	2026-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305411	-	valthbald	meta_tags_quick	Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or H…	CWE-79 Cross-site Scripting	CVE-2011-5030	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305412	-	alexander_palmo	simple_php_blog	Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry parameter to delete.p…	CWE-79 Cross-site Scripting	CVE-2011-5029	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305413	-	novell	sentinel_log_manager	Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users…	CWE-22 Path Traversal	CVE-2011-5028	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305414	-	zabbix	zabbix	Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.	CWE-79 Cross-site Scripting	CVE-2011-5027	2024-11-21 10:33	2011-12-30	Show	GitHub Exploit DB Packet Storm

305415	-	yaws	yaws	Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) t…	CWE-79 Cross-site Scripting	CVE-2011-5025	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305416	-	gnu	mailman	Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via the config parameter.	CWE-79 Cross-site Scripting	CVE-2011-5024	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305417	-	pligg	pligg_cms	Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-…	CWE-79 Cross-site Scripting	CVE-2011-5023	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305418	-	pligg	pligg_cms	SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter.	CWE-89 SQL Injection	CVE-2011-5022	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305419	-	winn	winn_guestbook	Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name para…	CWE-79 Cross-site Scripting	CVE-2011-5026	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm

305420	-	phpids	phpids	PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified ve…	CWE-94 Code Injection	CVE-2011-5021	2024-11-21 10:33	2011-12-29	Show	GitHub Exploit DB Packet Storm