Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4041 9.9 緊急
Network 		Apache Software Foundation Polaris Apache Software FoundationのPolarisにおける複数の脆弱性 CWE-20
CWE-284
CWE-732
CWE-863
CVE-2026-42812 2026-05-14 10:12 2026-05-4 Show GitHub Exploit DB Packet Storm
4042 7.5 重要
Network 		Open JS Foundation fast-uri Open JS Foundationのfast-uriにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-6321 2026-05-14 10:12 2026-05-4 Show GitHub Exploit DB Packet Storm
4043 7.5 重要
Network 		Open JS Foundation fast-uri Open JS Foundationのfast-uriにおける解釈の競合に関する脆弱性 CWE-436
解釈の競合 		CVE-2026-6322 2026-05-14 10:12 2026-05-5 Show GitHub Exploit DB Packet Storm
4044 4.8 警告
Network 		KDDI Androidアプリ「あんしんフィルター for au」 Androidアプリ「あんしんフィルター for au」における重要情報の平文送信の脆弱性 CWE-Other
その他 		CVE-2026-41281 2026-05-13 12:14 2026-05-13 Show GitHub Exploit DB Packet Storm
4045 7.8 重要
Local 		Bytello Ltd. Bytello Share（Windows版） Bytello Share（Windows版）のEXE形式インストーラにおけるDLL読み込みに関する脆弱性 CWE-Other
その他 		CVE-2026-44612 2026-05-13 12:05 2026-05-13 Show GitHub Exploit DB Packet Storm
4046 6.5 警告
Network 		whatsapp whatsapp whatsappにおけるNULL バイトまたは NULL キャラクタの無害化に関する脆弱性 CWE-158
NULL バイトまたは NULL キャラクタの不適切な無害化 		CVE-2026-23863 2026-05-13 10:27 2026-05-1 Show GitHub Exploit DB Packet Storm
4047 4.3 警告
Network 		whatsapp whatsapp whatsappにおける通信チャネルの送信元の不適切な検証に関する脆弱性 CWE-940
通信チャネルの送信元の不適切な検証 		CVE-2026-23866 2026-05-13 10:27 2026-05-1 Show GitHub Exploit DB Packet Storm
4048 7.5 重要
Network 		Postfix Project postfix Postfix Projectのpostfixにおける境界条件の判定に関する脆弱性 CWE-193
境界条件の判定 		CVE-2026-43964 2026-05-13 10:27 2026-05-4 Show GitHub Exploit DB Packet Storm
4049 8 重要
Network 		PHOENIX CONTACT fl mguard core tx ファームウェア
FL MGUARD 4305 Firmware
fl mguard delta tx/tx ファームウェア
fl mguard gt/gt vpn ファームウェア
FL&n… 		PHOENIX CONTACTのfl mguard 2102 ファームウェア等の複数製品における保存または転送前の重要な情報の削除に関する脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除 		CVE-2024-43384 2026-05-13 10:27 2026-05-7 Show GitHub Exploit DB Packet Storm
4050 6.5 警告
Network 		Fudo Security Fudo Enterprise Fudo SecurityのFudo Enterpriseにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-13480 2026-05-13 10:27 2026-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306551 - openssl openssl The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows r… CWE-399
 Resource Management Errors 		CVE-2011-3210 2024-11-21 10:29 2011-09-22 Show GitHub Exploit DB Packet Storm
306552 - openssl openssl crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value co… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-3207 2024-11-21 10:29 2011-09-22 Show GitHub Exploit DB Packet Storm
306553 - mantisbt mantisbt Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via a parameter, as demonstrated by the pr… CWE-79
Cross-site Scripting 		CVE-2011-2938 2024-11-21 10:29 2011-09-22 Show GitHub Exploit DB Packet Storm
306554 - roundcube webmail Cross-site scripting (XSS) vulnerability in the UI messages functionality in Roundcube Webmail before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to t… CWE-79
Cross-site Scripting 		CVE-2011-2937 2024-11-21 10:29 2011-09-22 Show GitHub Exploit DB Packet Storm
306555 - redhat enterprise_mrg Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized… CWE-287
Improper Authentication 		CVE-2011-2925 2024-11-21 10:29 2011-09-20 Show GitHub Exploit DB Packet Storm
306556 - google chrome Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact… CWE-843
Type Confusion 		CVE-2011-2875 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
306557 - google chrome Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspecified impact and remote attack vectors. CWE-295
Improper Certificate Validation  		CVE-2011-2874 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
306558 - google chrome Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2011-2864 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
306559 - google chrome Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2862 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm
306560 - google chrome Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read… CWE-20
 Improper Input Validation  		CVE-2011-2861 2024-11-21 10:29 2011-09-19 Show GitHub Exploit DB Packet Storm