Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3661 7.5 重要
Network 		アップル visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2026-28906 2026-05-15 10:52 2026-05-11 Show GitHub Exploit DB Packet Storm
3662 3.3 低
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28910 2026-05-15 10:52 2026-05-11 Show GitHub Exploit DB Packet Storm
3663 4.3 警告
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-28917 2026-05-15 10:52 2026-05-11 Show GitHub Exploit DB Packet Storm
3664 6.5 警告
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における複数の脆弱性 CWE-125
CWE-787
CVE-2026-28918 2026-05-15 10:52 2026-05-11 Show GitHub Exploit DB Packet Storm
3665 - - クアルコム (複数の製品) Intel製品に対するアップデート（2026年5月） - - 2026-05-14 17:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3666 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月12日） - - 2026-05-14 17:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3667 - - シーメンス (複数の製品) Siemens製品に対するアップデート（2026年5月） - CVE-2024-3596
CVE-2026-27446 		2026-05-14 17:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3668 7.8 重要
Local 		wps
キングソフト株式会社		 WPS Office2
WPS Cloud
WPS Cloud Pro
KINGSOFT PDF Pro 		WPS Officeで使用される名前付きパイプに対するアクセス制御不備の脆弱性 CWE-Other
その他 		CVE-2018-6400 2026-05-14 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
3669 6.5 警告
Network 		Augmentt Technology Augmentt Augmentt TechnologyのAugmenttにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-6355 2026-05-14 10:23 2026-04-22 Show GitHub Exploit DB Packet Storm
3670 9.6 緊急
Network 		Augmentt Technology Augmentt Augmentt TechnologyのAugmenttにおけるアクセス制御の不十分な粒度に関する脆弱性 CWE-1220
アクセス制御の不十分な粒度 		CVE-2026-6356 2026-05-14 10:23 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306381 - mozilla firefox
thunderbird
seamonkey 		Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the S… CWE-200
Information Exposure 		CVE-2011-2986 2024-11-21 10:29 2011-08-19 Show GitHub Exploit DB Packet Storm
306382 - mozilla firefox
seamonkey
thunderbird 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to caus… NVD-CWE-noinfo
CVE-2011-2985 2024-11-21 10:29 2011-08-19 Show GitHub Exploit DB Packet Storm
306383 - mozilla firefox
seamonkey
thunderbird 		Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execu… CWE-94
Code Injection 		CVE-2011-2984 2024-11-21 10:29 2011-08-19 Show GitHub Exploit DB Packet Storm
306384 - mozilla firefox
thunderbird
seamonkey 		Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attack… CWE-200
Information Exposure 		CVE-2011-2983 2024-11-21 10:29 2011-08-19 Show GitHub Exploit DB Packet Storm
306385 - mozilla firefox
thunderbird
seamonkey 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote att… NVD-CWE-noinfo
CVE-2011-2982 2024-11-21 10:29 2011-08-19 Show GitHub Exploit DB Packet Storm
306386 - mozilla firefox
seamonkey
thunderbird 		The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run … CWE-16
Configuration 		CVE-2011-2981 2024-11-21 10:29 2011-08-19 Show GitHub Exploit DB Packet Storm
306387 - mozilla firefox
thunderbird 		Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write … NVD-CWE-Other
CVE-2011-2980 2024-11-21 10:29 2011-08-19 Show GitHub Exploit DB Packet Storm
306388 - aveva
schneider-electric 		clearscada
scx_67
scx_68 		Cross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arb… CWE-79
Cross-site Scripting 		CVE-2011-3144 2024-11-21 10:29 2011-08-17 Show GitHub Exploit DB Packet Storm
306389 - aveva
schneider-electric 		clearscada
scx_67
scx_68 		Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of serv… CWE-399
 Resource Management Errors 		CVE-2011-3143 2024-11-21 10:29 2011-08-17 Show GitHub Exploit DB Packet Storm
306390 - wellintech kingview Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-3142 2024-11-21 10:29 2011-08-17 Show GitHub Exploit DB Packet Storm