Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3581	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8975	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

3582	3.3	低 Local	Siber Systems Inc.	RoboForm Password Manager	Androidアプリ「パスワード管理ロボフォーム」のintent処理における検証不備の脆弱性	CWE-357 危険な操作に対する不十分な警告	CVE-2026-47782	2026-05-21 16:37	2026-05-20	Show	GitHub Exploit DB Packet Storm

3583	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月19日）	-	-	2026-05-21 16:17	2026-05-20	Show	GitHub Exploit DB Packet Storm

3584	6.1	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-24710	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

3585	5.3	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24711	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

3586	7.3	重要 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-24712	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

3587	9.8	緊急 Network	Open JS Foundation	WebdriverIO	Open JS FoundationのWebdriverIOにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-25244	2026-05-21 10:55	2026-05-18	Show	GitHub Exploit DB Packet Storm

3588	6.5	警告 Network	マイクロソフト	Power Automate for Desktop	Microsoft Power Automate デスクトップの情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2026-40374	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

3589	7.8	重要 Local	protobufjs project	protobufjs-cli	protobufjs projectのprotobufjs-cliにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-42290	2026-05-21 10:55	2026-05-13	Show	GitHub Exploit DB Packet Storm

3590	6.1	警告 Network	beaugunderson	ip-address	beaugundersonのip-addressにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42338	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307681	-		microsoft	internet_explorer	Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Option Element Remote C…	NVD-CWE-noinfo	CVE-2011-1996	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307682	-		microsoft	internet_explorer	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, a…	CWE-908 Use of Uninitialized Resource	CVE-2011-1995	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307683	-		microsoft	internet_explorer	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Scroll Event Remote Cod…	NVD-CWE-noinfo	CVE-2011-1993	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307684	-		microsoft	windows_server_2008 windows_xp windows_7 windows_server_2003 windows_vista windows_2003_server	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not pro…	NVD-CWE-Other	CVE-2011-1985	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307685	-		microsoft	forefront_unified_access_gateway	Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute…	CWE-94 Code Injection	CVE-2011-1969	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307686	-		microsoft	forefront_unified_access_gateway	Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2011-1897	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307687	-		microsoft	forefront_unified_access_gateway	Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2011-1896	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307688	-		microsoft	forefront_unified_access_gateway	CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP resp…	CWE-94 Code Injection	CVE-2011-1895	2024-11-21 10:27	2011-10-12	Show	GitHub Exploit DB Packet Storm

307689	7.5	HIGH Network	linux redhat canonical debian	linux_kernel enterprise_linux enterprise_mrg ubuntu_linux debian_linux	net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause…	CWE-400 Uncontrolled Resource Consumption	CVE-2011-2189	2024-11-21 10:27	2011-10-10	Show	GitHub Exploit DB Packet Storm

307690	-		novell	identity_manager_roles_based_provisioning_module identity_manager_user_application	Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0…	CWE-79 Cross-site Scripting	CVE-2011-2227	2024-11-21 10:27	2011-10-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed