Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248551 3.3 注意 freedesktop.org - D-Bus の configure スクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2011-2533 2012-05-18 16:47 2011-06-22 Show GitHub Exploit DB Packet Storm
248552 4.6 警告 D-Bus
レッドハット
- Linux Kernel の dbus-marshal-header.c 内にある _dbus_header_byteswap 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-2200 2012-05-18 16:45 2011-06-10 Show GitHub Exploit DB Packet Storm
248553 9.3 危険 アップル
FreeType Project
レッドハット
- Apple iOS などの製品で使用される FreeType における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2011-0226 2012-05-18 16:42 2011-07-8 Show GitHub Exploit DB Packet Storm
248554 7.2 危険 Linux - Linux Kernel の HFS Plus ファイルシステムの実装におけるバッファオーバーフローの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2319 2012-05-18 16:32 2012-05-17 Show GitHub Exploit DB Packet Storm
248555 7.2 危険 Linux - Linux kernel の cap_bprm_set_creds 関数におけるパーソナリティ (personality) の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2123 2012-05-18 16:31 2012-05-17 Show GitHub Exploit DB Packet Storm
248556 4.9 警告 Linux - Linux kernel の KVM の実装におけるサービス運用妨害 (ホスト OS クラッシュ) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2121 2012-05-18 16:14 2012-05-17 Show GitHub Exploit DB Packet Storm
248557 4.9 警告 Linux - Linux Kernel の KVM の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1601 2012-05-18 16:12 2012-05-17 Show GitHub Exploit DB Packet Storm
248558 5.2 警告 Linux - Linux Kernel におけるサービス運用妨害 (ホスト OS クラッシュ) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1179 2012-05-18 16:10 2012-05-17 Show GitHub Exploit DB Packet Storm
248559 10 危険 Linux - Linux Kernel の mem_cgroup_usage_unregister_event 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2012-1146 2012-05-18 16:02 2012-05-17 Show GitHub Exploit DB Packet Storm
248560 7.2 危険 Linux - Linux Kernel の regset 関数におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-DesignError
CVE-2012-1097 2012-05-18 15:50 2012-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 8.8 HIGH
Network
postgresql postgresql Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A distinct attack is possible if… CWE-89
CWE-121
SQL Injection
Stack-based Buffer Overflow
CVE-2026-6637 2026-05-19 00:05 2026-05-14 Show GitHub Exploit DB Packet Storm
1142 4.3 MEDIUM
Network
postgresql postgresql Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintain… CWE-126
 Buffer Over-read
CVE-2026-6575 2026-05-19 00:04 2026-05-14 Show GitHub Exploit DB Packet Storm
1143 7.5 HIGH
Network
postgresql postgresql Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and GSS are both disable… CWE-674
 Uncontrolled Recursion
CVE-2026-6479 2026-05-19 00:04 2026-05-14 Show GitHub Exploit DB Packet Storm
1144 6.5 MEDIUM
Network
postgresql postgresql Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 … CWE-385
 Covert Timing Channel
CVE-2026-6478 2026-05-19 00:03 2026-05-14 Show GitHub Exploit DB Packet Storm
1145 8.8 HIGH
Network
postgresql postgresql Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a cli… CWE-242
 Use of Inherently Dangerous Function
CVE-2026-6477 2026-05-19 00:03 2026-05-14 Show GitHub Exploit DB Packet Storm
1146 7.2 HIGH
Network
postgresql postgresql SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next r… CWE-89
SQL Injection
CVE-2026-6476 2026-05-19 00:02 2026-05-14 Show GitHub Exploit DB Packet Storm
1147 8.8 HIGH
Network
postgresql postgresql Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system accou… CWE-61
 UNIX Symbolic Link (Symlink) Following
CVE-2026-6475 2026-05-19 00:02 2026-05-14 Show GitHub Exploit DB Packet Storm
1148 4.3 MEDIUM
Network
postgresql postgresql Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 1… CWE-134
Use of Externally-Controlled Format String
CVE-2026-6474 2026-05-19 00:00 2026-05-14 Show GitHub Exploit DB Packet Storm
1149 8.8 HIGH
Network
postgresql postgresql Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code… CWE-190
 Integer Overflow or Wraparound
CVE-2026-6473 2026-05-18 23:59 2026-05-14 Show GitHub Exploit DB Packet Storm
1150 5.4 MEDIUM
Network
postgresql postgresql Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, t… CWE-862
 Missing Authorization
CVE-2026-6472 2026-05-18 23:59 2026-05-14 Show GitHub Exploit DB Packet Storm