Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3871	7.3	重要 Network	アップル	tvOS iOS iPadOS watchOS	アップルのiPadOS等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43655	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3872	7.3	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43656	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3873	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-43658	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3874	6.2	警告 Local	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43666	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3875	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43668	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3876	5.5	警告 Local	jqlang	jq	jqlangのjqにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-43894	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3877	4.4	警告 Local	jqlang	jq	jqlangのjqにおける複数の脆弱性	CWE-158 CWE-20	CVE-2026-43895	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3878	5.5	警告 Local	jqlang	jq	jqlangのjqにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-43896	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3879	8.1	重要 Network	Daniel Garcia	Vaultwarden	Daniel GarciaのVaultwardenにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-43913	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

3880	9.8	緊急 Network	Daniel Garcia	Vaultwarden	Daniel GarciaのVaultwardenにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-43914	2026-05-15 10:58	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312981	-	smarty	smarty	Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file.	NVD-CWE-noinfo	CVE-2009-5053	2024-11-21 10:11	2011-02-4	Show	GitHub Exploit DB Packet Storm

312982	-	smarty	smarty	Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2009-5052	2024-11-21 10:11	2011-02-4	Show	GitHub Exploit DB Packet Storm

312983	-	symantec	antivirus system_center antivirus_central_quarantine_server	HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x b…	CWE-20 Improper Input Validation	CVE-2010-0111	2024-11-21 10:11	2011-02-1	Show	GitHub Exploit DB Packet Storm

312984	-	symantec	antivirus system_center antivirus_central_quarantine_server	Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 1…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-0110	2024-11-21 10:11	2011-02-1	Show	GitHub Exploit DB Packet Storm

312985	-	hastymail	hastymail2	Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission with…	CWE-16 Configuration	CVE-2009-5051	2024-11-21 10:11	2011-01-19	Show	GitHub Exploit DB Packet Storm

312986	-	symantec	web_gateway	SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME paramete…	CWE-89 SQL Injection	CVE-2010-0115	2024-11-21 10:11	2011-01-15	Show	GitHub Exploit DB Packet Storm

312987	-	catb	gif2png	Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via a long command-line argument, as demonstrated by a CGI prog…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-5018	2024-11-21 10:11	2011-01-15	Show	GitHub Exploit DB Packet Storm

312988	-	polyvision	roomwizard_firmware roomwizard	The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which al…	CWE-200 Information Exposure	CVE-2010-0214	2024-11-21 10:11	2011-01-12	Show	GitHub Exploit DB Packet Storm

312989	-	activecollab	activecollab	ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an attachment or (2) subscribe to an object, via a crafted URL.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0215	2024-11-21 10:11	2011-01-8	Show	GitHub Exploit DB Packet Storm

312990	-	cisco	ios	CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the me…	CWE-399 Resource Management Errors	CVE-2009-5040	2024-11-21 10:11	2011-01-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed