Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227591	6.8	警告	アップル	-	Apple Mac OS X の QuickDraw Manager におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0975	2013-06-6 16:28	2013-06-4	Show	GitHub Exploit DB Packet Storm

227592	7.5	危険	Google	-	Windows 上で稼働する Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-2854	2013-06-6 14:56	2013-06-4	Show	GitHub Exploit DB Packet Storm

227593	7.2	危険	IBM	-	IBM DB2 および DB2 Connect におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3475	2013-06-6 12:08	2013-05-31	Show	GitHub Exploit DB Packet Storm

227594	7.6	危険	IBM	-	IBM Tivoli Netcool/System Service Monitors および Application Service Monitors の Transaction MIB エージェントにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0509	2013-06-6 12:07	2013-05-31	Show	GitHub Exploit DB Packet Storm

227595	7.6	危険	IBM	-	IBM Tivoli Netcool/System Service Monitors および Application Service Monitors におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0508	2013-06-6 12:05	2013-05-31	Show	GitHub Exploit DB Packet Storm

227596	6.8	警告	ヒューレット・パッカードレッドハット	-	HP Linux Imaging and Printing (HPLIP) の foomatic-rip-hplip における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2697	2013-06-5 18:29	2011-07-29	Show	GitHub Exploit DB Packet Storm

227597	3.3	注意	オラクル	-	Oracle Sun Solaris 10 における Install/smpatch の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0569	2013-06-5 18:08	2013-01-15	Show	GitHub Exploit DB Packet Storm

227598	3.6	注意	Corey Minyard レッドハット	-	OpenIPMI の ipmievd における任意のプロセスを停止される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4339	2013-06-5 18:05	2011-12-15	Show	GitHub Exploit DB Packet Storm

227599	6.8	警告	レッドハット	-	Red Hat Enterprise Linux などで利用される Foomatic の foomaticrip.c における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-2964	2013-06-5 17:45	2011-07-29	Show	GitHub Exploit DB Packet Storm

227600	6.5	警告	IBM	-	IBM Security QRadar SIEM におけるオペレーティングシステムのコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-2970	2013-06-5 14:51	2013-06-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
611	-		-	-	A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with… New	CWE-862 Missing Authorization	CVE-2026-0272	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

612	-		-	-	A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to … New	CWE-78 OS Command	CVE-2026-0273	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

613	-		-	-	An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resource… New	CWE-1390 Weak Authentication	CVE-2026-0274	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

614	-		-	-	An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kern… New	CWE-122 CWE-131 CWE-787 Heap-based Buffer Overflow Incorrect Calculation of Buffer Size Out-of-bounds Write	CVE-2026-11604	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

615	6.4	MEDIUM Network	-	-	Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through … New	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-40985	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

616	4.8	MEDIUM Network	-	-	Spring Web Flow's JavaScript RemotingHandler renders the body of an error response as HTML even when the response is not "text/html", which can result in a scripting attack in the user's browser if t… New	CWE-79 Cross-site Scripting	CVE-2026-40986	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

617	7.1	HIGH Network	-	-	A malicious or compromised FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem (outside the configured local-directory) with attacker-controlled content. Affected version… New	CWE-22 Path Traversal	CVE-2026-40987	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

618	5.0	MEDIUM Adjacent	-	-	Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=tru… New	CWE-295 Improper Certificate Validation	CVE-2026-40992	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

619	8.2	HIGH Network	-	-	Wss4jSecurityInterceptor initialized its BSP (WS-I Basic Security Profile) compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security… New	CWE-1188 Insecure Default Initialization of Resource	CVE-2026-40994	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm

620	5.4	MEDIUM Network	-	-	X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped to UserDetails, without applying Spring Security's standard account lifecycle … New	CWE-287 Improper Authentication	CVE-2026-40995	2026-06-12 00:21	2026-06-11	Show	GitHub Exploit DB Packet Storm