Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229451	9.3	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-1535	2012-12-26 13:52	2012-08-14	Show	GitHub Exploit DB Packet Storm

229452	5.8	警告	マイクロソフト	-	Microsoft Windows Server 2008 R2 および Windows Server 2012 におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2012-2549	2012-12-26 13:48	2012-12-11	Show	GitHub Exploit DB Packet Storm

229453	4.3	警告	Haxx サイバートラスト株式会社 VMware レッドハット	-	libcurl の Curl_input_negotiate 関数におけるクライアントになりすまされる脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-2192	2012-12-26 12:14	2011-06-23	Show	GitHub Exploit DB Packet Storm

229454	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の include/asm-x86/futex.h におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-3086	2012-12-26 12:04	2010-11-9	Show	GitHub Exploit DB Packet Storm

229455	2.1	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の xfs_ioc_fsgetxattr 関数における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3078	2012-12-26 12:03	2010-09-21	Show	GitHub Exploit DB Packet Storm

229456	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の do_io_submit 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3067	2012-12-26 12:01	2010-09-26	Show	GitHub Exploit DB Packet Storm

229457	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の fs/aio.c 内にある io_submit_one 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3066	2012-12-26 12:00	2010-11-9	Show	GitHub Exploit DB Packet Storm

229458	4.7	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の ext4_ext_get_blocks 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3015	2012-12-26 11:59	2010-08-20	Show	GitHub Exploit DB Packet Storm

229459	7.9	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の xfs 実装におけるリンクが無効に設定されているファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-2943	2012-12-26 11:58	2010-09-20	Show	GitHub Exploit DB Packet Storm

229460	2.1	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel のネットワークキューイング機能の実装における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2942	2012-12-26 11:55	2010-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
261	4.3	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses to authenticated user… Update	CWE-843 Type Confusion	CVE-2026-11785	2026-06-13 03:47	2026-06-9	Show	GitHub Exploit DB Packet Storm

262	6.5	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds… Update	CWE-125 Out-of-bounds Read	CVE-2026-11786	2026-06-13 03:40	2026-06-9	Show	GitHub Exploit DB Packet Storm

263	6.3	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that … Update	CWE-126 Buffer Over-read	CVE-2026-11787	2026-06-13 03:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

264	7.5	HIGH Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the L… Update	CWE-476 NULL Pointer Dereference	CVE-2026-11788	2026-06-13 03:30	2026-06-9	Show	GitHub Exploit DB Packet Storm

265	6.5	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a… Update	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-11789	2026-06-13 03:30	2026-06-9	Show	GitHub Exploit DB Packet Storm

266	4.9	MEDIUM Network	redhat	directory_server 389_directory_server enterprise_linux	A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker… Update	CWE-400 Uncontrolled Resource Consumption	CVE-2026-11790	2026-06-13 03:21	2026-06-9	Show	GitHub Exploit DB Packet Storm

267	7.5	HIGH Network	-	-	Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography. New	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2026-9638	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

268	7.6	HIGH Network	-	-	Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the registered email ad… New	CWE-306 Missing Authentication for Critical Function	CVE-2026-53981	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

269	7.8	HIGH Local	-	-	Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via loca… New	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-53406	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

270	10.0	CRITICAL Network	-	-	SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity toke… New	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-48558	2026-06-13 03:16	2026-06-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed