Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4021	4.7	警告 Local		-	アップルのmacOSにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-28830	2026-05-14 10:22	2026-05-11	Show	GitHub Exploit DB Packet Storm

4022	7.8	重要 Local		-	アップルのmacOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-28840	2026-05-14 10:22	2026-05-11	Show	GitHub Exploit DB Packet Storm

4023	7.5	重要 Network		-	アップルのmacOSにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-28848	2026-05-14 10:22	2026-05-11	Show	GitHub Exploit DB Packet Storm

4024	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-28860	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

4025	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-28883	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

4026	6.2	警告 Local	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-28897	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

4027	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28904	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

4028	7.5	重要 Network	アップル	iOS iPadOS tvOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28905	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

4029	7.5	重要 Network		-	アップルのmacOSにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28908	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

4030	7.5	重要 Network	アップル	iOS iPadOS tvOS watchOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28913	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306381	7.5	HIGH Network	polipo_project debian	polipo debian_linux	Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.	CWE-617 Reachable Assertion	CVE-2011-3596	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

306382	9.8	CRITICAL Network	guidestar	wec_discussion_forum	The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.	CWE-89 SQL Injection	CVE-2011-3584	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

306383	9.8	CRITICAL Network	typo3	typo3	It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could lead to a SQL Injection vulnerability. This issue can only …	CWE-89 SQL Injection	CVE-2011-3583	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

306384	3.7	LOW Network	debian	advanced_package_tool debian_linux	It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2011-3374	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

306385	6.1	MEDIUM Network	drupal	views_builk_operations	Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" …	CWE-79 Cross-site Scripting	CVE-2011-3373	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

306386	7.3	HIGH Network	gnome	evolution-data-server3	evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server.…	CWE-311 Missing Encryption of Sensitive Data	CVE-2011-3355	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

306387	7.1	HIGH Local	openvas	openvas-scanner	openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this fla…	CWE-59 Link Following	CVE-2011-3351	2024-11-21 10:30	2019-11-26	Show	GitHub Exploit DB Packet Storm

306388	4.8	MEDIUM Network	ziku	zikula	Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula adm…	CWE-79 Cross-site Scripting	CVE-2011-3352	2024-11-21 10:30	2019-11-20	Show	GitHub Exploit DB Packet Storm

306389	9.8	CRITICAL Network	marmaro	masqmail	masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.	CWE-273 Improper Check for Dropped Privileges	CVE-2011-3350	2024-11-21 10:30	2019-11-20	Show	GitHub Exploit DB Packet Storm

306390	7.8	HIGH Local	lightdm_project	lightdm	lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can a…	CWE-269 Improper Privilege Management	CVE-2011-3349	2024-11-21 10:30	2019-11-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed