Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252601 5.1 警告 rsync.samba.org
レッドハット		 - rsync における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1097 2011-04-27 11:32 2011-03-26 Show GitHub Exploit DB Packet Storm
252602 6.9 警告 GNOME Project
レッドハット		 - GNOME Display Manager におけるファイルの所有権を変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-0727 2011-04-27 11:31 2011-03-28 Show GitHub Exploit DB Packet Storm
252603 7.5 危険 レッドハット - Plone における管理者のアクセス権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0720 2011-04-27 11:30 2011-02-3 Show GitHub Exploit DB Packet Storm
252604 7.5 危険 CA Technologies - 複数の CA 製品の mng_core_com.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3984 2011-04-27 11:29 2010-12-9 Show GitHub Exploit DB Packet Storm
252605 2.1 注意 freedesktop.org
サイバートラスト株式会社
レッドハット		 - D-Bus におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4352 2011-04-27 11:26 2010-12-30 Show GitHub Exploit DB Packet Storm
252606 - - foolabs - Foolabs Xpdf にサービス運用妨害 (DoS) の脆弱性 - - 2011-04-26 12:35 2011-03-22 Show GitHub Exploit DB Packet Storm
252607 4.3 警告 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1141 2011-04-26 12:28 2011-02-28 Show GitHub Exploit DB Packet Storm
252608 9.3 危険 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の wiretap/pcapng.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0024 2011-04-26 12:25 2010-08-29 Show GitHub Exploit DB Packet Storm
252609 4.3 警告 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の NTLMSSP 解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-1143 2011-04-26 12:24 2010-08-29 Show GitHub Exploit DB Packet Storm
252610 4.3 警告 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の dissect_ms_compressed_string および dissect_mscldap_string 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1140 2011-04-26 12:23 2011-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2691 8.5 HIGH
Network 		socialengine socialengine SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via the uri request parameter is no… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41461 2026-04-30 05:16 2026-04-24 Show GitHub Exploit DB Packet Storm
2692 9.8 CRITICAL
Network 		socialengine socialengine SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized befo… CWE-89
SQL Injection 		CVE-2026-41460 2026-04-30 05:16 2026-04-24 Show GitHub Exploit DB Packet Storm
2693 6.2 MEDIUM
Local 		apple ipados
iphone_os 		A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2. Notifications marked for deletion could be unexpectedly … CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor 		CVE-2026-28950 2026-04-30 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
2694 5.1 MEDIUM
Local 		- - EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory. A local attacker can place a specially crafted DLL in thi… CWE-427
 Uncontrolled Search Path Element 		CVE-2025-10549 2026-04-30 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
2695 4.8 MEDIUM
Network 		- - Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client and the DeskTime upda… CWE-295
CWE-296
CWE-494
Improper Certificate Validation 
 Improper Following of a Certificate's Chain of Trust
 Download of Code Without Integrity Check 		CVE-2025-10539 2026-04-30 05:16 2026-04-28 Show GitHub Exploit DB Packet Storm
2696 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: vfio/xe: Reorganize the init to decouple migration from reset Attempting to issue reset on VF devices that don't support migratio… NVD-CWE-noinfo
CVE-2026-31601 2026-04-30 05:15 2026-04-25 Show GitHub Exploit DB Packet Storm
2697 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Handle invalid large leaf mappings correctly It has been possible for a long time to mark ptes in the linear map as in… CWE-476
 NULL Pointer Dereference 		CVE-2026-31600 2026-04-30 05:14 2026-04-25 Show GitHub Exploit DB Packet Storm
2698 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections syzbot reported a general protection fault in vidt… CWE-476
 NULL Pointer Dereference 		CVE-2026-31599 2026-04-30 05:12 2026-04-25 Show GitHub Exploit DB Packet Storm
2699 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dio_end_io_write ocfs2_unlink takes orphan dir inode_lock first and then ip_alloc… CWE-667
 Improper Locking 		CVE-2026-31598 2026-04-30 05:10 2026-04-25 Show GitHub Exploit DB Packet Storm
2700 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already… CWE-415
 Double Free 		CVE-2026-31608 2026-04-30 05:03 2026-04-25 Show GitHub Exploit DB Packet Storm