Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3571 7.5 重要
Network 		Espressif Systems ESP32 Arduino Espressif SystemsのESP32 Arduinoにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-42855 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3572 6.1 警告
Network 		マイクロソフト Microsoft Exchange Server マイクロソフトのMicrosoft Exchange Serverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42897 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3573 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43286 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3574 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43287 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3575 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-43288 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3576 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43289 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3577 7.5 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2026-43296 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3578 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-43297 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3579 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43298 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3580 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43299 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307141 - cisco ios The Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet… CWE-16
Configuration 		CVE-2011-2395 2024-11-21 10:28 2011-06-9 Show GitHub Exploit DB Packet Storm
307142 - visiwave site_survey VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a (1) vws and (2) vwr file with an invalid Type prop… CWE-94
Code Injection 		CVE-2011-2386 2024-11-21 10:28 2011-06-8 Show GitHub Exploit DB Packet Storm
307143 - microsoft internet_explorer
ie 		Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME… CWE-20
 Improper Input Validation  		CVE-2011-2383 2024-11-21 10:28 2011-06-4 Show GitHub Exploit DB Packet Storm
307144 - microsoft internet_explorer
ie 		Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files … CWE-20
 Improper Input Validation  		CVE-2011-2382 2024-11-21 10:28 2011-06-4 Show GitHub Exploit DB Packet Storm
307145 - hp intelligent_management_center Integer overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to execute arbitrary code via a crafted length value in an a packet that triggers a heap-based buffer ove… CWE-189
Numeric Errors 		CVE-2011-2331 2024-11-21 10:28 2011-06-3 Show GitHub Exploit DB Packet Storm
307146 - ibm tivoli_management_framework Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2330 2024-11-21 10:28 2011-06-3 Show GitHub Exploit DB Packet Storm
307147 - apache rampart\/c The rampart_timestamp_token_validate function in util/rampart_timestamp_token.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2329 2024-11-21 10:28 2011-06-3 Show GitHub Exploit DB Packet Storm
307148 - hp loadrunner Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a .usr (aka Virtual User script) file with long directives. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2328 2024-11-21 10:28 2011-06-3 Show GitHub Exploit DB Packet Storm
307149 9.8 CRITICAL
Network 		websvn websvn A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument… CWE-78
OS Command  		CVE-2011-2195 2024-11-21 10:27 2021-10-26 Show GitHub Exploit DB Packet Storm
307150 8.8 HIGH
Network 		google chrome Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-704
 Incorrect Type Conversion or Cast 		CVE-2011-1805 2024-11-21 10:27 2020-06-4 Show GitHub Exploit DB Packet Storm