Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4041	7.5	重要 Network		-	アップルのmacOSにおけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-39870	2026-05-15 11:01	2026-05-11	Show	GitHub Exploit DB Packet Storm

4042	6.8	警告 Physics	ZTE	ZX297520V3 ファームウェア	ZTEのZX297520V3 ファームウェアにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-40003	2026-05-15 11:01	2026-05-7	Show	GitHub Exploit DB Packet Storm

4043	7.8	重要 Local	ZTE	ZXCLOUD iRAI	ZTEのZXCLOUD iRAIにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2026-40004	2026-05-15 11:01	2026-05-7	Show	GitHub Exploit DB Packet Storm

4044	6.5	警告 Network	Zulip	Zulip Server	ZulipのZulip Serverにおけるアクセス制御に関する脆弱性	CWE-284 CWE-noinfo	CVE-2026-40300	2026-05-15 11:01	2026-05-12	Show	GitHub Exploit DB Packet Storm

4045	6.5	警告 Network	NocoBase	NocoBase	NocoBaseにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-40346	2026-05-15 11:01	2026-04-18	Show	GitHub Exploit DB Packet Storm

4046	8.8	重要 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のリモートでコードが実行される脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40357	2026-05-15 11:01	2026-05-12	Show	GitHub Exploit DB Packet Storm

4047	8.8	重要 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のリモートでコードが実行される脆弱性	CWE-1220 アクセス制御の不十分な粒度	CVE-2026-40365	2026-05-15 11:01	2026-05-12	Show	GitHub Exploit DB Packet Storm

4048	8	重要 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のリモートでコードが実行される脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40368	2026-05-15 11:01	2026-05-12	Show	GitHub Exploit DB Packet Storm

4049	5.5	警告 Local	jqlang	jq	jqlangのjqにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-40612	2026-05-15 11:01	2026-05-11	Show	GitHub Exploit DB Packet Storm

4050	7.5	重要 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40863	2026-05-15 11:01	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305961	-	ffmpeg libav	ffmpeg libav	The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause…	CWE-20 Improper Input Validation	CVE-2011-3952	2024-11-21 10:31	2012-08-21	Show	GitHub Exploit DB Packet Storm

305962	-	ffmpeg libav	ffmpeg libav	The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3951	2024-11-21 10:31	2012-08-21	Show	GitHub Exploit DB Packet Storm

305963	-	ffmpeg libav	ffmpeg libav	Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, al…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3947	2024-11-21 10:31	2012-08-21	Show	GitHub Exploit DB Packet Storm

305964	-	ffmpeg libav	ffmpeg libav	nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3940	2024-11-21 10:31	2012-08-21	Show	GitHub Exploit DB Packet Storm

305965	-	ffmpeg libav	ffmpeg libav	The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allow…	CWE-20 Improper Input Validation	CVE-2011-3936	2024-11-21 10:31	2012-08-21	Show	GitHub Exploit DB Packet Storm

305966	-	ffmpeg libav	ffmpeg libav	The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3929	2024-11-21 10:31	2012-08-21	Show	GitHub Exploit DB Packet Storm

305967	-	moodle	moodle	Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RS…	CWE-352 Origin Validation Error	CVE-2011-4133	2024-11-21 10:31	2012-07-16	Show	GitHub Exploit DB Packet Storm

305968	-	x.org	x_server	The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service (…	CWE-362 Race Condition	CVE-2011-4029	2024-11-21 10:31	2012-07-4	Show	GitHub Exploit DB Packet Storm

305969	-	x.org	x_server	The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled d…	CWE-59 Link Following	CVE-2011-4028	2024-11-21 10:31	2012-07-4	Show	GitHub Exploit DB Packet Storm

305970	-	suse linux	linux_enterprise_server linux_kernel	The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1)…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-4127	2024-11-21 10:31	2012-07-4	Show	GitHub Exploit DB Packet Storm