Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226191	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2136	2013-03-26 16:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

226192	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2135	2013-03-26 16:41	2011-08-9	Show	GitHub Exploit DB Packet Storm

226193	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2134	2013-03-26 16:40	2011-08-9	Show	GitHub Exploit DB Packet Storm

226194	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2130	2013-03-26 16:39	2011-08-9	Show	GitHub Exploit DB Packet Storm

226195	5	警告	ヒューレット・パッカードアドビシステムズ日立	-	複数の Adobe 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2093	2013-03-26 16:38	2011-06-14	Show	GitHub Exploit DB Packet Storm

226196	4.3	警告	CloudBees	-	CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0328	2013-03-26 16:35	2013-02-16	Show	GitHub Exploit DB Packet Storm

226197	10	危険	ヒューレット・パッカードアドビシステムズ日立	-	複数の Adobe 製品における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2011-2092	2013-03-26 15:24	2011-06-14	Show	GitHub Exploit DB Packet Storm

226198	5	警告	サン・マイクロシステムズ日立ヒューレット・パッカード	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0872	2013-03-26 15:21	2011-06-7	Show	GitHub Exploit DB Packet Storm

226199	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0866	2013-03-26 15:12	2011-06-10	Show	GitHub Exploit DB Packet Storm

226200	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0864	2013-03-26 15:10	2011-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2881	5.3	MEDIUM Network	-	-	A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.	-	CVE-2026-4891	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

2882	8.4	HIGH Local	-	-	A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.	-	CVE-2026-4892	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

2883	5.3	MEDIUM Network	-	-	An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.	-	CVE-2026-4893	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

2884	-		-	-	An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing le…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2026-35227	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

2885	-		-	-	A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unau…	CWE-306 Missing Authentication for Critical Function	CVE-2026-5029	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

2886	-		-	-	ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's br…	CWE-79 Cross-site Scripting	CVE-2026-6909	2026-05-12 23:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

2887	-		-	-	ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's br…	CWE-79 Cross-site Scripting	CVE-2026-6956	2026-05-12 23:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

2888	9.8	CRITICAL Network	cross-crypto	cross-implementation	CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypto_sign_open() caused b…	CWE-121 CWE-122 Stack-based Buffer Overflow Heap-based Buffer Overflow	CVE-2026-41509	2026-05-12 23:15	2026-05-8	Show	GitHub Exploit DB Packet Storm

2889	8.1	HIGH Network	-	-	An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. A…	CWE-470 Unsafe Reflection	CVE-2026-8178	2026-05-12 23:13	2026-05-9	Show	GitHub Exploit DB Packet Storm

2890	-		-	-	An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.	-	CVE-2026-20696	2026-05-12 23:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed