Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226531	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2416	2013-03-26 16:58	2011-08-9	Show	GitHub Exploit DB Packet Storm

226532	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2415	2013-03-26 16:56	2011-08-9	Show	GitHub Exploit DB Packet Storm

226533	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2414	2013-03-26 16:54	2011-08-9	Show	GitHub Exploit DB Packet Storm

226534	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2140	2013-03-26 16:53	2011-08-9	Show	GitHub Exploit DB Packet Storm

226535	6.4	警告	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2139	2013-03-26 16:52	2011-08-9	Show	GitHub Exploit DB Packet Storm

226536	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2138	2013-03-26 16:48	2011-08-9	Show	GitHub Exploit DB Packet Storm

226537	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2137	2013-03-26 16:46	2011-08-9	Show	GitHub Exploit DB Packet Storm

226538	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2136	2013-03-26 16:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

226539	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2135	2013-03-26 16:41	2011-08-9	Show	GitHub Exploit DB Packet Storm

226540	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2134	2013-03-26 16:40	2011-08-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3511	4.3	MEDIUM Network	dovecot open-xchange	dovecot	Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no. This causes folders to be spammed to all users. The impact is lim…	CWE-284 NVD-CWE-noinfo Improper Access Control	CVE-2026-40020	2026-05-19 02:36	2026-05-12	Show	GitHub Exploit DB Packet Storm

3512	5.3	MEDIUM Adjacent	dovecot open-xchange	dovecot	Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself between Dovecot and the c…	CWE-99 Resource Injection	CVE-2026-33603	2026-05-19 02:35	2026-05-12	Show	GitHub Exploit DB Packet Storm

3513	6.5	MEDIUM Network	dovecot open-xchange	dovecot	Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit. Attacker can use this to deg…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40016	2026-05-19 02:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

3514	8.2	HIGH Network	-	-	PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid parameter of login.php that allows unauthenticated attackers to extract database conte…	CWE-89 SQL Injection	CVE-2021-47966	2026-05-19 02:33	2026-05-16	Show	GitHub Exploit DB Packet Storm

3515	6.1	MEDIUM Network	-	-	PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths and POST parameters. Attackers …	CWE-79 Cross-site Scripting	CVE-2021-47967	2026-05-19 02:33	2026-05-16	Show	GitHub Exploit DB Packet Storm

3516	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to validate that a remote cluster has access to a channel before processing membership removal requests during shared …	CWE-863 Incorrect Authorization	CVE-2026-28759	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

3517	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to limit the size of the request body on the start meeting API endpoint, which allows an authenticated attacker to cau…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-2325	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

3518	3.1	LOW Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an authenticated OAuth client to red…	CWE-305 Authentication Bypass by Primary Weakness	CVE-2026-6334	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

3519	4.3	MEDIUM Network	-	-	Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to have API-level checks on which groups the user can create issues or attach comments to which allows a user that is member of multip…	CWE-863 Incorrect Authorization	CVE-2026-6341	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

3520	4.3	MEDIUM Network	-	-	Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to appropriately check for valid namespaces which allows plugin users to create subscriptions to groups that were not whitelisted via …	CWE-863 Incorrect Authorization	CVE-2026-6342	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed