Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3601	8.1	重要 Network	FreeBSD	FreeBSD	FreeBSDにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-42512	2026-05-7 12:04	2026-04-30	Show	GitHub Exploit DB Packet Storm

3602	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-42778	2026-05-7 12:04	2026-05-1	Show	GitHub Exploit DB Packet Storm

3603	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-42779	2026-05-7 12:04	2026-05-1	Show	GitHub Exploit DB Packet Storm

3604	7.5	重要 Network	レッドハット GNOME Project	gdk-pixbuf Red Hat Enterprise Linux Server TUS Red Hat Enterprise Linux Server AUS Red Hat Enterprise Linux	GNOME Project等の複数ベンダの製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-5201	2026-05-7 12:04	2026-03-31	Show	GitHub Exploit DB Packet Storm

3605	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-5299	2026-05-7 12:04	2026-04-30	Show	GitHub Exploit DB Packet Storm

3606	8.4	重要 Local	FreeBSD	FreeBSD	FreeBSDにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-5398	2026-05-7 12:04	2026-04-22	Show	GitHub Exploit DB Packet Storm

3607	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-5401	2026-05-7 12:03	2026-04-30	Show	GitHub Exploit DB Packet Storm

3608	8.8	重要 Network	Wireshark	Wireshark	Wiresharkにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-5402	2026-05-7 12:03	2026-04-30	Show	GitHub Exploit DB Packet Storm

3609	7.8	重要 Local	Wireshark	Wireshark	Wiresharkにおける複数の脆弱性	CWE-122 CWE-787	CVE-2026-5403	2026-05-7 12:03	2026-05-1	Show	GitHub Exploit DB Packet Storm

3610	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-5404	2026-05-7 12:03	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306681	-	nazgul	nostromo	Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in …	CWE-22 Path Traversal	CVE-2011-0751	2024-11-21 10:24	2011-03-17	Show	GitHub Exploit DB Packet Storm

306682	-	sugarcrm	sugarcrm	SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names …	CWE-20 Improper Input Validation	CVE-2011-0745	2024-11-21 10:24	2011-03-17	Show	GitHub Exploit DB Packet Storm

306683	-	emc	avamar	Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors.	NVD-CWE-noinfo	CVE-2011-0648	2024-11-21 10:24	2011-03-17	Show	GitHub Exploit DB Packet Storm

306684	-	linux redhat canonical	linux_kernel enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_eus ubuntu_linux	Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending a…	CWE-362 Race Condition	CVE-2011-0695	2024-11-21 10:24	2011-03-16	Show	GitHub Exploit DB Packet Storm

306685	-	e107	e107	Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2011-0457	2024-11-21 10:24	2011-03-16	Show	GitHub Exploit DB Packet Storm

306686	-	wordpress	wordpress	wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.	CWE-200 Information Exposure	CVE-2011-0701	2024-11-21 10:24	2011-03-15	Show	GitHub Exploit DB Packet Storm

306687	-	wordpress	wordpress	Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (1) the Quick/Bulk Edit ti…	CWE-79 Cross-site Scripting	CVE-2011-0700	2024-11-21 10:24	2011-03-15	Show	GitHub Exploit DB Packet Storm

306688	-	apache	subversion	The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) …	NVD-CWE-Other	CVE-2011-0715	2024-11-21 10:24	2011-03-12	Show	GitHub Exploit DB Packet Storm

306689	-	otrs	otrs	webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."	CWE-78 OS Command	CVE-2011-0456	2024-11-21 10:24	2011-03-12	Show	GitHub Exploit DB Packet Storm

306690	-	novell	vibe_onprem	Unspecified vulnerability in Novell Vibe OnPrem 3.0 before Hot Patch 1 allows remote attackers to execute arbitrary code via unknown vectors.	NVD-CWE-noinfo	CVE-2011-0464	2024-11-21 10:24	2011-03-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed