Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3421 7.5 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28955 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3422 6.5 警告
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における複数の脆弱性 CWE-125
CWE-787
CVE-2026-28956 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3423 3.3 低
Local 		アップル visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28957 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3424 7.5 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-28959 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3425 4.6 警告
Physics 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2026-28963 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3426 4.9 警告
Network 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-28967 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3427 4.3 警告
Network 		アップル visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品におけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-28971 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3428 6.5 警告
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-28972 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3429 7.5 重要
Network 		- アップルのmacOSにおける複数の脆弱性 CWE-200
CWE-269
CVE-2026-28976 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
3430 8.8 重要
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28978 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346121 - openbsd openssh OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack. NVD-CWE-Other
CVE-2001-0529 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
346122 - spearhead netgap_200
netgap_300 		Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters. NVD-CWE-Other
CVE-2001-0530 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
346123 - symantec liveupdate Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords. NVD-CWE-Other
CVE-2001-0549 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
346124 - ssh secure_shell SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as l… NVD-CWE-Other
CVE-2001-0553 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
346125 - t._hauck jana_web_server T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0). NVD-CWE-Other
CVE-2001-0558 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
346126 - paul_vixie vixie_cron crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when a… NVD-CWE-Other
CVE-2001-0559 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
346127 - paul_vixie vixie_cron Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters). NVD-CWE-Other
CVE-2001-0560 2017-10-10 10:29 2001-08-22 Show GitHub Exploit DB Packet Storm
346128 - electrosoft electrocomm ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 character) strings sent to port 23. NVD-CWE-Other
CVE-2001-0563 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
346129 - apc ap9606 APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporari… NVD-CWE-Other
CVE-2001-0564 2017-10-10 10:29 2001-08-22 Show GitHub Exploit DB Packet Storm
346130 - zope zope Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass. NVD-CWE-Other
CVE-2001-0567 2017-10-10 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm