Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4421	7.5	重要 Network	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	インターネットキー交換 (IKE) プロトコルのサービス拒否の脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-35424	2026-05-18 12:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

4422	5.4	警告 Network	Frappe	Frappe	Frappeにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-3837	2026-05-18 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

4423	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025	Windows カーネルの特権の昇格の脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-40369	2026-05-18 12:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

4424	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Microsoft Cryptographic Services の特権の昇格の脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-40377	2026-05-18 12:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

4425	6.2	警告 Physics	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows ボリュームマネージャー拡張ドライバーのリモートでコードが実行される脆弱性	CWE-122 CWE-125 CWE-197	CVE-2026-40380	2026-05-18 12:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

4426	7.5	重要 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40902	2026-05-18 12:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

4427	6.8	警告 Adjacent	VMware	Spring Boot	VMwareのSpring Bootにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-40970	2026-05-18 12:15	2026-04-27	Show	GitHub Exploit DB Packet Storm

4428	9.1	緊急 Network	VMware	Spring Boot	VMwareのSpring Bootにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-40971	2026-05-18 12:15	2026-04-27	Show	GitHub Exploit DB Packet Storm

4429	9.8	緊急 Network	VMware	Spring Boot	VMwareのSpring Bootにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-40974	2026-05-18 12:15	2026-04-28	Show	GitHub Exploit DB Packet Storm

4430	7.2	重要 Network	SonicWALL	SMA7200 ファームウェア SMA7210 ファームウェア SMA8200v SMA6200 ファームウェア SMA6210 ファームウェア	SonicWALLのSMA6200 ファームウェア等の複数製品におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-4112	2026-05-18 12:15	2026-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307021	-	rsyslog	rsyslog	Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3200	2024-11-21 10:29	2011-09-7	Show	GitHub Exploit DB Packet Storm

307022	-	squid-cache	squid	Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause…	NVD-CWE-Other	CVE-2011-3205	2024-11-21 10:29	2011-09-7	Show	GitHub Exploit DB Packet Storm

307023	-	tibco	spotfire_server spotfire_analytics_server	Unspecified vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attac…	NVD-CWE-noinfo	CVE-2011-3134	2024-11-21 10:29	2011-09-3	Show	GitHub Exploit DB Packet Storm

307024	-	tibco	spotfire_server spotfire_analytics_server	Session fixation vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote …	NVD-CWE-Other	CVE-2011-3133	2024-11-21 10:29	2011-09-3	Show	GitHub Exploit DB Packet Storm

307025	-	tibco	spotfire_server spotfire_analytics_server	Cross-site scripting (XSS) vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allo…	CWE-79 Cross-site Scripting	CVE-2011-3132	2024-11-21 10:29	2011-09-3	Show	GitHub Exploit DB Packet Storm

307026	-	rhythm	tcptrack	Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-2903	2024-11-21 10:29	2011-09-3	Show	GitHub Exploit DB Packet Storm

307027	-	apache	tomcat	Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP reque…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-3190	2024-11-21 10:29	2011-09-1	Show	GitHub Exploit DB Packet Storm

307028	-	redhat	system-config-printer	pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the (1) Net…	CWE-20 Improper Input Validation	CVE-2011-2899	2024-11-21 10:29	2011-09-1	Show	GitHub Exploit DB Packet Storm

307029	-	rubyonrails	rails	The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which…	CWE-20 Improper Input Validation	CVE-2011-3187	2024-11-21 10:29	2011-08-30	Show	GitHub Exploit DB Packet Storm

307030	-	rubyonrails	rails	CRLF injection vulnerability in actionpack/lib/action_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response sp…	CWE-94 Code Injection	CVE-2011-3186	2024-11-21 10:29	2011-08-30	Show	GitHub Exploit DB Packet Storm