Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229361	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

229362	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

229363	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4422	2012-12-21 16:38	2011-02-15	Show	GitHub Exploit DB Packet Storm

229364	5.1	警告	サン・マイクロシステムズヒューレット・パッカードオラクル VMware 日立レッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3574	2012-12-21 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

229365	5.1	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3573	2012-12-21 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

229366	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3572	2012-12-21 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

229367	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3571	2012-12-21 16:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

229368	7.6	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3570	2012-12-21 16:30	2010-10-12	Show	GitHub Exploit DB Packet Storm

229369	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3569	2012-12-21 16:28	2010-10-12	Show	GitHub Exploit DB Packet Storm

229370	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3568	2012-12-21 16:26	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
241	5.3	MEDIUM Network	-	-	The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbitrary caller-supplied account identifier, without validating any ownership relat… New	CWE-862 Missing Authorization	CVE-2026-50244	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

242	7.5	HIGH Network	-	-	The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. An actor able to presen… New	CWE-862 Missing Authorization	CVE-2026-50108	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

243	8.1	HIGH Network	-	-	Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remains valid indefinitely and cannot be reset o… New	CWE-262 Not Using Password Aging	CVE-2026-50101	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

244	4.6	MEDIUM Physics	-	-	During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled… New	CWE-538 File and Directory Information Exposure	CVE-2026-50099	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

245	-		-	-	Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to before version 9.9.1-alpha.3, the routeAllowList server option restricts … New	CWE-863 Incorrect Authorization	CVE-2026-50008	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

246	-		-	-	Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.78 and 9.9.1-alpha.2, Parse Server's GraphQL endpoint discloses schema me… New	CWE-209 Information Exposure Through an Error Message	CVE-2026-47248	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

247	4.3	MEDIUM Network	-	-	Solidtime is an open-source time-tracking app. Prior to version 0.12.2, Solidtime defines an explicit invitations:view and members:view permissions that gates the official invitations and members API… New	CWE-863 Incorrect Authorization	CVE-2026-47236	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

248	-		-	-	Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.77 and 9.9.1-alpha.1, an unauthenticated attacker who knows a publicly-kn… New	CWE-1333 Inefficient Regular Expression Complexity	CVE-2026-47138	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

249	8.8	HIGH Network	-	-	A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently reassign a device to an arbitrary account. Because the affected endpoints vali… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-42947	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

250	5.3	MEDIUM Network	-	-	Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. Because the platform also exposes an endp… New	CWE-340 Generation of Predictable Numbers or Identifiers	CVE-2026-42932	2026-06-13 04:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed