Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3781 8.8 重要
Network
マイクロソフト Visual Studio Code GitHub Copilot と Visual Studio Code セキュリティ機能バイパスの脆弱性 CWE-74
インジェクション
CVE-2026-41109 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3782 7.4 重要
Network
Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-41132 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
3783 6.1 警告
Network
Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-41255 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
3784 9.8 緊急
Network
Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-41293 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3785 5 警告
Local
マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-200
CWE-59
CWE-79
CWE-79
CVE-2026-41610 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3786 3.3
Local
マイクロソフト Visual Studio Code Visual Studio Code のリモートでコードが実行される脆弱性 CWE-77
CWE-79
CWE-80
CVE-2026-41611 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3787 8.8 重要
Network
マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-384
CWE-384
CWE-78
CVE-2026-41613 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3788 7.4 重要
Network
マイクロソフト Microsoft Authenticator Microsoft Authenticator の情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2026-41615 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3789 6.5 警告
Network
Distribution Distribution Distributionにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41888 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3790 7.5 重要
Network
Signal K Signal K Server Signal KのSignal K Serverにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-41893 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305711 - adobe acrobat
acrobat_reader
Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 1… NVD-CWE-noinfo
CVE-2011-4369 2024-11-21 10:32 2011-12-17 Show GitHub Exploit DB Packet Storm
305712 - parallels parallels_plesk_panel Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting
CVE-2011-4777 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305713 - parallels parallels_plesk_panel Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allow remote attackers to inject arbitrary web script or HTML via crafted inp… CWE-79
Cross-site Scripting
CVE-2011-4776 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305714 - parallels parallels_plesk_small_business_panel The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to… NVD-CWE-Other
CVE-2011-4768 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305715 - parallels parallels_plesk_small_business_panel The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application… CWE-200
Information Exposure
CVE-2011-4767 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305716 - parallels parallels_plesk_small_business_panel The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP source code via a direct request to wysiwyg/fckconfig.js. NOTE: CVE dis… CWE-200
Information Exposure
CVE-2011-4766 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305717 - parallels parallels_plesk_small_business_panel The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attac… CWE-200
Information Exposure
CVE-2011-4765 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305718 - parallels parallels_plesk_small_business_panel Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script o… CWE-79
Cross-site Scripting
CVE-2011-4764 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305719 - parallels parallels_plesk_small_business_panel Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted… CWE-89
SQL Injection
CVE-2011-4763 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
305720 - parallels parallels_plesk_small_business_panel Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretatio… NVD-CWE-Other
CVE-2011-4762 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm