Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251771 5 警告 The PHP Group - PHP の mt_rand 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0755 2011-03-1 15:57 2010-12-9 Show GitHub Exploit DB Packet Storm
251772 4.4 警告 The PHP Group - PHP の SplFileInfo::getType 関数におけるシンボリックリンク攻撃の脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-0754 2011-03-1 15:55 2010-12-9 Show GitHub Exploit DB Packet Storm
251773 4.3 警告 The PHP Group - PHP の PCNTL 拡張におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2011-0753 2011-03-1 15:54 2010-12-9 Show GitHub Exploit DB Packet Storm
251774 5 警告 The PHP Group - PHP の extract 関数におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0752 2011-03-1 15:52 2010-12-8 Show GitHub Exploit DB Packet Storm
251775 5 警告 日立 - JP1/NETM/DM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2011-03-1 15:26 2011-01-31 Show GitHub Exploit DB Packet Storm
251776 7.5 危険 IBM - IBM DB2 の DB2 Administration Server コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0731 2011-03-1 15:17 2011-01-28 Show GitHub Exploit DB Packet Storm
251777 7.8 危険 ISC, Inc.
レッドハット		 - ISC DHCPv6 にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0413 2011-03-1 15:10 2011-01-28 Show GitHub Exploit DB Packet Storm
251778 7.5 危険 Google - Google Android SDK の BMP::readFromStream メソッドにおける整数オーバーフロー脆弱性 CWE-189
数値処理の問題 		CVE-2008-0986 2011-03-1 14:58 2008-03-6 Show GitHub Exploit DB Packet Storm
251779 6.8 警告 Google - Google Android SDK の GIF ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0985 2011-03-1 14:56 2008-03-6 Show GitHub Exploit DB Packet Storm
251780 7.2 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - 64-bit プラットフォーム上で稼働している Linux kernel の compat_alloc_user_space 関数における権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2010-3081 2011-03-1 14:46 2010-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1711 9.8 CRITICAL
Network 		hcltech aion Una posible vulnerabilidad de inyección de comandos en HCL AION. Esto puede permitir la ejecución no intencionada de comandos, lo que podría llevar a acciones no autorizadas en el sistema subyacente.… CWE-78
OS Command  		CVE-2025-52626 2026-04-26 02:58 2026-02-4 Show GitHub Exploit DB Packet Storm
1712 7.5 HIGH
Network 		hcltech aion A vulnerability  Cacheable SSL Page Found vulnerability has been identified in HCL AION.  Cached data may expose credentials, system identifiers, or internal file paths to attackers with access t… CWE-525
 Use of Web Browser Cache Containing Sensitive Information 		CVE-2025-52625 2026-04-26 02:58 2025-10-10 Show GitHub Exploit DB Packet Storm
1713 7.5 HIGH
Network 		- - A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processe… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-4111 2026-04-26 02:16 2026-03-14 Show GitHub Exploit DB Packet Storm
1714 7.5 HIGH
Network 		- - Se identificó una vulnerabilidad en la lógica de descompresión de archivos RAR5 de la biblioteca libarchive, específicamente dentro de la ruta de procesamiento de archive_read_data(). Cuando se proce… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-4111 2026-04-26 02:16 2026-03-14 Show GitHub Exploit DB Packet Storm
1715 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-31534 2026-04-25 15:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1716 6.5 MEDIUM
Network 		- - MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker to inject arbitrar… CWE-74
Injection 		CVE-2026-41319 2026-04-25 12:16 2026-04-24 Show GitHub Exploit DB Packet Storm
1717 6.7 MEDIUM
Local 		- - A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-4878 2026-04-25 11:16 2026-04-10 Show GitHub Exploit DB Packet Storm
1718 8.8 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the DocumentStore creation endpoint allows authenticated us… CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-41277 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm
1719 7.5 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password reset functionality on cloud.flowiseai.com sends a reset password link over the u… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-41275 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm
1720 8.3 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) protection bypass vulnerability exists in the Custom Func… CWE-284
CWE-918
Improper Access Control
Server-Side Request Forgery (SSRF)  		CVE-2026-41270 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm