Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249821 4.3 警告 Joomla! - Joomla! におけるクロスサイトスクリプティング脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2710 2012-03-27 18:43 2011-07-11 Show GitHub Exploit DB Packet Storm
249822 5 警告 Ruby-lang.org - Ruby の SecureRandom.random_bytes 関数における結果の文字列を推測される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2705 2012-03-27 18:43 2011-08-5 Show GitHub Exploit DB Packet Storm
249823 7.5 危険 UMN - MapServer におけるスタックベースのオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2704 2012-03-27 18:43 2011-08-1 Show GitHub Exploit DB Packet Storm
249824 7.5 危険 UMN - MapServer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2703 2012-03-27 18:43 2011-08-1 Show GitHub Exploit DB Packet Storm
249825 5.8 警告 FreeRADIUS - FreeRADIUS の ocsp_check 関数における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-2701 2012-03-27 18:43 2011-08-3 Show GitHub Exploit DB Packet Storm
249826 2.1 注意 Linux - Linux kernel の si4713_write_econtrol_string 関数におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2700 2012-03-27 18:43 2011-09-6 Show GitHub Exploit DB Packet Storm
249827 4.3 警告 Wireshark - Wireshark の elem_cell_id_aux 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-2698 2012-03-27 18:43 2011-07-18 Show GitHub Exploit DB Packet Storm
249828 4.9 警告 Linux - Linux kernel の ext4 サブシステムにおけるサービス運用妨害 (DoS) 脆弱性 CWE-189
数値処理の問題 		CVE-2011-2695 2012-03-27 18:43 2011-07-28 Show GitHub Exploit DB Packet Storm
249829 7.5 危険 jan wolter - Apache HTTP Server の mod_authnz_external モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2688 2012-03-27 18:43 2011-07-28 Show GitHub Exploit DB Packet Storm
249830 7.5 危険 Drupal - Drupal における node_access の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2687 2012-03-27 18:43 2011-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3131 5.8 MEDIUM
Network 		- - Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network tr… CWE-405
CWE-406
CWE-770
 Asymmetric Resource Consumption (Amplification)
 Insufficient Control of Network Message Volume (Network Amplification)
 Allocation of Resources Without Limits or Throttling 		CVE-2026-45557 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
3132 8.4 HIGH
Local 		- - An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external … - CVE-2026-5804 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
3133 5.0 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an authenticated attacker to redirect… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-6333 2026-05-20 02:51 2026-05-18 Show GitHub Exploit DB Packet Storm
3134 4.8 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges ca… CWE-79
Cross-site Scripting 		CVE-2025-40901 2026-05-20 02:47 2026-05-19 Show GitHub Exploit DB Packet Storm
3135 9.8 CRITICAL
Network 		h2o h2o A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h2o-core/src/main/java/hex/Model.java of the component JAR Handler. Performing a… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2026-8751 2026-05-20 02:46 2026-05-17 Show GitHub Exploit DB Packet Storm
3136 4.8 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a mal… CWE-79
Cross-site Scripting 		CVE-2025-40902 2026-05-20 02:44 2026-05-19 Show GitHub Exploit DB Packet Storm
3137 4.8 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with administrative privileg… CWE-79
Cross-site Scripting 		CVE-2025-40903 2026-05-20 02:44 2026-05-19 Show GitHub Exploit DB Packet Storm
3138 5.3 MEDIUM
Network 		h2o h2o A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function exec of the file h2o-core/src/main/java/water/rapids/ast/prims/misc/AstSetProperty.java of the compon… CWE-266
CWE-284
NVD-CWE-noinfo
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-8752 2026-05-20 02:44 2026-05-17 Show GitHub Exploit DB Packet Storm
3139 5.4 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malici… CWE-79
Cross-site Scripting 		CVE-2025-40904 2026-05-20 02:41 2026-05-19 Show GitHub Exploit DB Packet Storm
3140 4.8 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious content during error page composition which allows an attacker with access to edit… CWE-79
Cross-site Scripting 		CVE-2026-3495 2026-05-20 02:37 2026-05-18 Show GitHub Exploit DB Packet Storm