Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 12:20 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1211	6.5	警告 Network	Apache Software Foundation	Airflow Providers Samba (apache-airflow-providers-samba)	Apache Software FoundationのAirflow Providers Samba (apache-airflow-providers-samba)におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-49818	2026-06-15 11:21	2026-06-9	Show	GitHub Exploit DB Packet Storm

1212	5.5	警告 Local		-	アップルのmacOSにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-24268	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1213	8.8	重要 Local		-	アップルのmacOSにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2025-24284	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1214	5.5	警告 Local		-	アップルのmacOSにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2025-30431	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1215	5.5	警告 Local		-	アップルのmacOSにおける認可されていない行為者への個人情報の漏えいに関する脆弱性	CWE-359 認可されていないアクターへの個人情報の漏えい	CVE-2025-30459	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1216	7.8	重要 Local		-	アップルのmacOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2025-31272	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1217	5.5	警告 Local		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-43339	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1218	5.5	警告 Local		-	アップルのmacOSにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2025-46293	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1219	5.3	警告 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-46308	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

1220	7.5	重要 Network		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-46315	2026-06-15 11:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
309611	-	wireshark	wireshark	The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (assertion failure) via crafted packets, as demonstrated by fuzz-2010-12-30-28473.pcap.	CWE-399 Resource Management Errors	CVE-2011-0445	2024-11-21 10:23	2011-01-13	Show	GitHub Exploit DB Packet Storm

309612	-	wireshark	wireshark	Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-0444	2024-11-21 10:23	2011-01-13	Show	GitHub Exploit DB Packet Storm

309613	-	tinybb	tinybb	SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile ac…	CWE-89 SQL Injection	CVE-2011-0443	2024-11-21 10:23	2011-01-13	Show	GitHub Exploit DB Packet Storm

309614	-	polyvision	roomwizard_firmware roomwizard	The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP sessi…	CWE-255 Credentials Management	CVE-2011-0423	2024-11-21 10:23	2011-01-12	Show	GitHub Exploit DB Packet Storm

309615	-	ibm	websphere_application_server	The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-0316	2024-11-21 10:23	2011-01-12	Show	GitHub Exploit DB Packet Storm

309616	-	ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers …	CWE-79 Cross-site Scripting	CVE-2011-0315	2024-11-21 10:23	2011-01-12	Show	GitHub Exploit DB Packet Storm

309617	-	ibm	websphere_mq	Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-0314	2024-11-21 10:23	2011-01-12	Show	GitHub Exploit DB Packet Storm

309618	-	microsoft	data_access_components windows_data_access_components	Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote …	CWE-20 Improper Input Validation	CVE-2011-0027	2024-11-21 10:23	2011-01-12	Show	GitHub Exploit DB Packet Storm

309619	-	microsoft	data_access_components windows_data_access_components	Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remo…	CWE-189 Numeric Errors	CVE-2011-0026	2024-11-21 10:23	2011-01-12	Show	GitHub Exploit DB Packet Storm

309620	-	phenotype-cms	phenotype_cms	SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted…	CWE-89 SQL Injection	CVE-2011-0407	2024-11-21 10:23	2011-01-11	Show	GitHub Exploit DB Packet Storm