Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249221 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1941 2012-06-7 14:42 2012-06-5 Show GitHub Exploit DB Packet Storm
249222 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1938 2012-06-7 14:25 2012-06-5 Show GitHub Exploit DB Packet Storm
249223 4.3 警告 NewsGator Technologies, Inc. - FeedDemon において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2634 2012-06-7 12:01 2012-06-7 Show GitHub Exploit DB Packet Storm
249224 4.3 警告 Sebastian Heinlein
Canonical
- Ubuntu で使用される Aptdaemon における任意のパッケージをインストールされる脆弱性 CWE-287
不適切な認証
CVE-2012-0944 2012-06-6 16:08 2012-06-4 Show GitHub Exploit DB Packet Storm
249225 6.5 警告 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5093 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
249226 7.5 危険 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5092 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
249227 6.5 警告 Best Practical Solutions - Best Practical Solutions RT における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4460 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
249228 3.5 注意 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4459 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
249229 6.8 警告 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-4458 2012-06-6 14:12 2012-06-4 Show GitHub Exploit DB Packet Storm
249230 6.8 警告 Best Practical Solutions - Best Practical Solutions RT におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-2085 2012-06-6 14:10 2012-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2831 5.5 MEDIUM
Local
dell powerflex_appliance_intelligent_catalog
powerflex_manager
powerflex_rack
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnera… CWE-922
 Insecure Storage of Sensitive Information
CVE-2025-32746 2026-05-23 05:45 2026-05-22 Show GitHub Exploit DB Packet Storm
2832 7.8 HIGH
Local
dell powerflex_appliance_intelligent_catalog
powerflex_manager
powerflex_rack
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leadi… CWE-266
 Incorrect Privilege Assignment
CVE-2025-32747 2026-05-23 05:45 2026-05-22 Show GitHub Exploit DB Packet Storm
2833 7.5 HIGH
Network
dell powerflex_appliance_intelligent_catalog
powerflex_manager
powerflex_rack
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit thi… CWE-276
Incorrect Default Permissions 
CVE-2025-32749 2026-05-23 05:44 2026-05-22 Show GitHub Exploit DB Packet Storm
2834 8.2 HIGH
Local
- - The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoT… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-5817 2026-05-23 05:44 2026-05-23 Show GitHub Exploit DB Packet Storm
2835 8.2 HIGH
Local
- - The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configur… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-5843 2026-05-23 05:44 2026-05-23 Show GitHub Exploit DB Packet Storm
2836 5.5 MEDIUM
Local
dell powerflex_appliance_intelligent_catalog
powerflex_manager
powerflex_rack
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerabi… CWE-922
 Insecure Storage of Sensitive Information
CVE-2025-32751 2026-05-23 05:40 2026-05-23 Show GitHub Exploit DB Packet Storm
2837 5.5 MEDIUM
Local
dell powerflex_appliance_intelligent_catalog
powerflex_manager
powerflex_rack
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh. A low privileged attacker with local access could potentially explo… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-46371 2026-05-23 05:40 2026-05-23 Show GitHub Exploit DB Packet Storm
2838 7.1 HIGH
Network
- - Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve a… CWE-502
 Deserialization of Untrusted Data
CVE-2026-9291 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
2839 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.11.0 through 2.28.1 allow any authenticated user to inject arbitrary HTML by updating their account's font family. Upon explo… CWE-79
Cross-site Scripting
CVE-2026-40596 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
2840 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given any pre-existing XSS / HTML injection vulnerability, an attacker can bypass the Content Security Pol… CWE-79
CWE-358
Cross-site Scripting
 Improperly Implemented Security Check for Standard
CVE-2026-40597 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm