Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229371	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3567	2012-12-21 16:24	2010-10-12	Show	GitHub Exploit DB Packet Storm

229372	6	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の ioc_general 関数における重要な情報を取得される脆弱性	CWE-189 数値処理の問題	CVE-2010-4157	2012-12-21 15:59	2010-11-22	Show	GitHub Exploit DB Packet Storm

229373	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の copy_semid_to_user 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4083	2012-12-21 15:57	2010-10-20	Show	GitHub Exploit DB Packet Storm

229374	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player におけるプラグインモジュールのインストールに関する問題	CWE-Other その他	CVE-2012-6271	2012-12-21 15:50	2012-12-19	Show	GitHub Exploit DB Packet Storm

229375	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における Shockwave ランタイムのインストールに関する問題	CWE-Other その他	CVE-2012-6270	2012-12-21 15:48	2012-12-19	Show	GitHub Exploit DB Packet Storm

229376	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の snd_hdspm_hwdep_ioctl 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4081	2012-12-21 15:46	2010-11-30	Show	GitHub Exploit DB Packet Storm

229377	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の snd_hdsp_hwdep_ioctl 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4080	2012-12-21 15:44	2010-11-30	Show	GitHub Exploit DB Packet Storm

229378	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の uart_get_count 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4075	2012-12-21 15:43	2010-11-29	Show	GitHub Exploit DB Packet Storm

229379	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の ipc サブシステムにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4073	2012-12-21 15:42	2010-11-29	Show	GitHub Exploit DB Packet Storm

229380	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の copy_shmid_to_user 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4072	2012-12-21 15:41	2010-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
261	4.3	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses to authenticated user… Update	CWE-843 Type Confusion	CVE-2026-11785	2026-06-13 03:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

262	6.5	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds… Update	CWE-125 Out-of-bounds Read	CVE-2026-11786	2026-06-13 03:40	2026-06-9	Show	GitHub Exploit DB Packet Storm

263	6.3	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that … Update	CWE-126 Buffer Over-read	CVE-2026-11787	2026-06-13 03:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

264	7.5	HIGH Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the L… Update	CWE-476 NULL Pointer Dereference	CVE-2026-11788	2026-06-13 03:30	2026-06-9	Show	GitHub Exploit DB Packet Storm

265	6.5	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a… Update	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-11789	2026-06-13 03:30	2026-06-9	Show	GitHub Exploit DB Packet Storm

266	4.9	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker… Update	CWE-400 Uncontrolled Resource Consumption	CVE-2026-11790	2026-06-13 03:21	2026-06-9	Show	GitHub Exploit DB Packet Storm

267	7.5	HIGH Network	-	-	Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography. New	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2026-9638	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

268	7.6	HIGH Network	-	-	Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the registered email ad… New	CWE-306 Missing Authentication for Critical Function	CVE-2026-53981	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

269	7.8	HIGH Local	-	-	Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via loca… New	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-53406	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

270	10.0	CRITICAL Network	-	-	SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity toke… New	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-48558	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed