Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2911 5.5 警告
Local 		マイクロソフト Visual Studio Code - Live Preview extension マイクロソフトのVisual Studio Code - Live Preview extensionにおける複数の脆弱性 CWE-22
CWE-22
CWE-23
CVE-2026-41612 2026-05-18 11:22 2026-05-12 Show GitHub Exploit DB Packet Storm
2912 7.8 重要
Local 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-43903 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2913 7.8 重要
Local 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-43904 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2914 7.8 重要
Local 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-43905 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2915 7.8 重要
Local 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-43906 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2916 8.3 重要
Network 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における複数の脆弱性 CWE-190
CWE-787
CVE-2026-43907 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2917 8.8 重要
Network 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における複数の脆弱性 CWE-190
CWE-787
CVE-2026-43908 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2918 8.8 重要
Network 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における複数の脆弱性 CWE-125
CWE-190
CWE-787
CVE-2026-43909 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2919 5.5 警告
Local 		OpenImageIO (OIIO) OpenImageIO (OIIO) OpenImageIO (OIIO)における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43996 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
2920 6.5 警告
Network 		Shellhub Shellhub Shellhubにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44423 2026-05-18 11:22 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312091 - otrs otrs Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7283 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312092 - otrs otrs Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when the CustomerPanelOwnSelection and CustomerGroupSupport options are enabled, allows… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7282 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312093 - otrs otrs Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-… CWE-200
Information Exposure 		CVE-2008-7281 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312094 - otrs otrs Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malformed UTF-8 characters, which allows remote… CWE-20
 Improper Input Validation  		CVE-2008-7280 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312095 - otrs otrs The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers vi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7279 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312096 - otrs otrs The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easi… CWE-20
 Improper Input Validation  		CVE-2008-7278 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312097 - otrs otrs Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authe… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7277 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312098 - otrs otrs Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restricti… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7276 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312099 - otrs otrs Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2.3.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) AgentTic… CWE-79
Cross-site Scripting 		CVE-2008-7275 2024-11-21 09:58 2011-03-19 Show GitHub Exploit DB Packet Storm
312100 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2… CWE-20
 Improper Input Validation  		CVE-2008-7274 2024-11-21 09:58 2011-02-15 Show GitHub Exploit DB Packet Storm