Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226961	6	警告	IBM	-	IBM Domino の webadmin.nsf におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0489	2013-03-28 15:26	2013-03-21	Show	GitHub Exploit DB Packet Storm

226962	4.3	警告	IBM	-	IBM Domino の webadmin.nsf におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0488	2013-03-28 15:25	2013-03-21	Show	GitHub Exploit DB Packet Storm

226963	8.5	危険	IBM	-	IBM Domino の Java コンソールにおける一時的な資格をハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2013-0487	2013-03-28 15:23	2013-03-21	Show	GitHub Exploit DB Packet Storm

226964	1.5	注意	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0525	2013-03-28 15:17	2013-03-21	Show	GitHub Exploit DB Packet Storm

226965	4.3	警告	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5943	2013-03-28 14:27	2013-03-21	Show	GitHub Exploit DB Packet Storm

226966	5	警告	IBM	-	Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0486	2013-03-28 12:00	2013-03-28	Show	GitHub Exploit DB Packet Storm

226967	5	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3558	2013-03-27 17:37	2011-10-18	Show	GitHub Exploit DB Packet Storm

226968	4.3	警告	ヒューレット・パッカードアドビシステムズ日立	-	Adobe Flex SDK におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2461	2013-03-27 17:33	2011-11-30	Show	GitHub Exploit DB Packet Storm

226969	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2460	2013-03-27 17:32	2011-11-10	Show	GitHub Exploit DB Packet Storm

226970	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2459	2013-03-27 17:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4261	9.8	CRITICAL Network	nvidia	tensorrt_llm	NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and i…	CWE-502 Deserialization of Untrusted Data	CVE-2026-24142	2026-05-21 09:04	2026-05-20	Show	GitHub Exploit DB Packet Storm

4262	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2026-8399	2026-05-21 08:16	2026-05-21	Show	GitHub Exploit DB Packet Storm

4263	3.1	LOW Network	emqx	emqx	A vulnerability has been found in EMQX up to 6.2.0. This affects an unknown function of the file apps/emqx/src/emqx_persistent_session_ds.erl of the component QoS 2 PUBLISH Packet Handler. Such manip…	CWE-362 Race Condition	CVE-2026-8741	2026-05-21 08:02	2026-05-17	Show	GitHub Exploit DB Packet Storm

4264	8.1	HIGH Network	microsoft	malware_protection_engine	Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.	CWE-122 Heap-based Buffer Overflow	CVE-2026-45584	2026-05-21 03:56	2026-05-20	Show	GitHub Exploit DB Packet Storm

4265	7.8	HIGH Local	microsoft	windows_admin_center	Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.	CWE-59 Link Following	CVE-2026-42834	2026-05-21 03:29	2026-05-20	Show	GitHub Exploit DB Packet Storm

4266	5.8	MEDIUM Network	-	-	The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attack…	-	CVE-2026-7385	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

4267	7.8	HIGH Local	-	-	Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.	CWE-59 Link Following	CVE-2026-41091	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

4268	4.8	MEDIUM Network	-	-	CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in the admin role management interface. In a…	CWE-80 CWE-116 Basic XSS Improper Encoding or Escaping of Output	CVE-2026-34246	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

4269	7.1	HIGH Network	-	-	libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When compositing an overla…	CWE-125 Out-of-bounds Read	CVE-2026-32882	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

4270	6.5	MEDIUM Network	mozilla	firefox thunderbird	Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8961	2026-05-21 02:58	2026-05-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed