Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3711	7.5	重要 Network		-	アップルのmacOSにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-28925	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3712	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な比較ロジックの粒度に関する脆弱性	CWE-1254 不正な比較ロジックの粒度	CVE-2026-28929	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3713	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28944	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3714	7.8	重要 Local	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28951	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3715	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28953	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3716	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-28954	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3717	5.5	警告 Local	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-28958	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3718	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-28962	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3719	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-28964	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3720	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28965	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312721	6.1	MEDIUM Network	ajaxlife_project	ajaxlife	A vulnerability has been found in cfire24 ajaxlife up to 0.3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can b…	-	CVE-2008-10002	2024-11-21 09:43	2023-03-5	Show	GitHub Exploit DB Packet Storm

312722	6.1	MEDIUM Network	pro2col	stingray_fts	A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remo…	CWE-79 Cross-site Scripting	CVE-2008-10001	2024-11-21 09:43	2022-03-29	Show	GitHub Exploit DB Packet Storm

312723	7.5	HIGH Network	sencha	ext_js	Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2007-6758	2024-11-21 09:40	2020-01-24	Show	GitHub Exploit DB Packet Storm

312724	9.8	CRITICAL Network	clamav debian	clamav debian_linux	clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.	NVD-CWE-Other	CVE-2007-6745	2024-11-21 09:40	2019-11-8	Show	GitHub Exploit DB Packet Storm

312725	8.8	HIGH Network	sas	sas_drug_development	SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back or forward button in a web browser.	CWE-20 Improper Input Validation	CVE-2007-6763	2024-11-21 09:40	2019-08-1	Show	GitHub Exploit DB Packet Storm

312726	9.8	CRITICAL Network	linux	linux_kernel	In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-6762	2024-11-21 09:40	2019-07-28	Show	GitHub Exploit DB Packet Storm

312727	7.8	HIGH Local	linux	linux_kernel	drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trigger an incorrect count value and videobu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-6761	2024-11-21 09:40	2017-04-24	Show	GitHub Exploit DB Packet Storm

312728	9.8	CRITICAL Network	dataprobe	ibootbar_firmware	Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie.	CWE-287 Improper Authentication	CVE-2007-6760	2024-11-21 09:40	2017-04-8	Show	GitHub Exploit DB Packet Storm

312729	9.8	CRITICAL Network	dataprobe	ibootbar_firmware	Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie.	CWE-287 Improper Authentication	CVE-2007-6759	2024-11-21 09:40	2017-04-8	Show	GitHub Exploit DB Packet Storm

312730	-		gehealthcare	centricity_dms_firmware	GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is de…	CWE-255 Credentials Management	CVE-2007-6757	2024-11-21 09:40	2015-08-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed