Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255431	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における権限昇格の脆弱性	CWE-Other その他	CVE-2011-0038	2011-03-4 14:53	2011-02-8	Show	GitHub Exploit DB Packet Storm

255432	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0036	2011-03-4 14:50	2011-02-8	Show	GitHub Exploit DB Packet Storm

255433	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0035	2011-03-4 14:30	2011-02-8	Show	GitHub Exploit DB Packet Storm

255434	5	警告	日立	-	Hitachi Tuning Manager Software におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-03-4 14:24	2011-02-7	Show	GitHub Exploit DB Packet Storm

255435	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter NB100 および NB200 プラットフォームに複数の脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-4733	2011-03-4 14:21	2011-02-7	Show	GitHub Exploit DB Packet Storm

255436	4.3	警告	IBM サイバートラスト株式会社ヒューレット・パッカードターボリナックス OpenSSL Project VMware レッドハット	-	OpenSSL の kssl_keytab_is_available 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0433	2011-03-4 10:48	2010-03-24	Show	GitHub Exploit DB Packet Storm

255437	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0085	2011-03-4 10:45	2010-03-30	Show	GitHub Exploit DB Packet Storm

255438	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0084	2011-03-4 10:44	2010-03-30	Show	GitHub Exploit DB Packet Storm

255439	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の HotSpot Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0082	2011-03-4 10:43	2010-03-30	Show	GitHub Exploit DB Packet Storm

255440	9	危険	マイクロソフト VMware	-	Microsoft SQL Server の insert ステートメントに関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0106	2011-03-4 10:39	2008-07-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4371	7.2	HIGH Network	arubanetworks	arubaos sd-wan	Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authent…	CWE-121 Stack-based Buffer Overflow	CVE-2026-44859	2026-05-15 03:41	2026-05-13	Show	GitHub Exploit DB Packet Storm

4372	7.2	HIGH Network	arubanetworks	arubaos sd-wan	SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with adm…	CWE-89 SQL Injection	CVE-2026-44860	2026-05-15 03:41	2026-05-13	Show	GitHub Exploit DB Packet Storm

4373	7.2	HIGH Network	arubanetworks	arubaos sd-wan	SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with adm…	CWE-89 SQL Injection	CVE-2026-44861	2026-05-15 03:41	2026-05-13	Show	GitHub Exploit DB Packet Storm

4374	7.2	HIGH Network	arubanetworks	arubaos sd-wan	SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with adm…	CWE-89 SQL Injection	CVE-2026-44862	2026-05-15 03:41	2026-05-13	Show	GitHub Exploit DB Packet Storm

4375	6.5	MEDIUM Network	liquidjs	liquidjs	LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in {% layout %} / {% block %} causes an infinite recursive loo…	CWE-674 Uncontrolled Recursion	CVE-2026-41311	2026-05-15 03:40	2026-05-9	Show	GitHub Exploit DB Packet Storm

4376	7.2	HIGH Network	arubanetworks	arubaos sd-wan	SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with adm…	CWE-89 SQL Injection	CVE-2026-44863	2026-05-15 03:40	2026-05-13	Show	GitHub Exploit DB Packet Storm

4377	7.2	HIGH Network	arubanetworks	arubaos sd-wan	SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with adm…	CWE-89 SQL Injection	CVE-2026-44864	2026-05-15 03:40	2026-05-13	Show	GitHub Exploit DB Packet Storm

4378	6.5	MEDIUM Network	argoproj	argo_workflows	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereference in server/auth/g…	CWE-476 NULL Pointer Dereference	CVE-2026-42183	2026-05-15 03:40	2026-05-9	Show	GitHub Exploit DB Packet Storm

4379	5.3	MEDIUM Network	mem0	mem0	The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories). The endpoint allows unauthenticated users to submit arbitrary memory recor…	CWE-306 CWE-862 Missing Authentication for Critical Function Missing Authorization	CVE-2026-31245	2026-05-15 03:39	2026-05-13	Show	GitHub Exploit DB Packet Storm

4380	6.5	MEDIUM Network	mem0	mem0	The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}). The endpoint allows unauthenticated users to delete arbitrar…	CWE-306 CWE-862 Missing Authentication for Critical Function Missing Authorization	CVE-2026-31244	2026-05-15 03:38	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed