Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
611 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Winlogon の特権の昇格の脆弱性 CWE-59
リンク解釈の問題
CVE-2026-42989 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
612 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-42991 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
613 6.5 警告
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-43951 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
614 5.5 警告
Local
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-44119 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
615 7.3 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード
CVE-2026-44185 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
616 7.3 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける無限ループに関する脆弱性 CWE-835
無限ループ
CVE-2026-44186 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
617 9.8 緊急
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファアンダーフローの脆弱性 CWE-124
バッファアンダーフロー
CVE-2026-44631 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
618 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Windows ネットワーク コントローラー (NC) ホスト エージェントのサービス拒否の脆弱性 CWE-416
CWE-822
CVE-2026-44805 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
619 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-44809 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
620 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Microsoft Cryptographic Services の特権の昇格の脆弱性 CWE-287
不適切な認証
CVE-2026-44810 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309611 - wireshark wireshark The ASN.1 BER dissector in Wireshark 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (assertion failure) via crafted packets, as demonstrated by fuzz-2010-12-30-28473.pcap. CWE-399
 Resource Management Errors
CVE-2011-0445 2024-11-21 10:23 2011-01-13 Show GitHub Exploit DB Packet Storm
309612 - wireshark wireshark Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service (crash) and … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0444 2024-11-21 10:23 2011-01-13 Show GitHub Exploit DB Packet Storm
309613 - tinybb tinybb SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile ac… CWE-89
SQL Injection
CVE-2011-0443 2024-11-21 10:23 2011-01-13 Show GitHub Exploit DB Packet Storm
309614 - polyvision roomwizard_firmware
roomwizard
The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP sessi… CWE-255
Credentials Management
CVE-2011-0423 2024-11-21 10:23 2011-01-12 Show GitHub Exploit DB Packet Storm
309615 - ibm websphere_application_server The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote a… CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-0316 2024-11-21 10:23 2011-01-12 Show GitHub Exploit DB Packet Storm
309616 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers … CWE-79
Cross-site Scripting
CVE-2011-0315 2024-11-21 10:23 2011-01-12 Show GitHub Exploit DB Packet Storm
309617 - ibm websphere_mq Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0314 2024-11-21 10:23 2011-01-12 Show GitHub Exploit DB Packet Storm
309618 - microsoft data_access_components
windows_data_access_components
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote … CWE-20
 Improper Input Validation 
CVE-2011-0027 2024-11-21 10:23 2011-01-12 Show GitHub Exploit DB Packet Storm
309619 - microsoft data_access_components
windows_data_access_components
Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remo… CWE-189
Numeric Errors
CVE-2011-0026 2024-11-21 10:23 2011-01-12 Show GitHub Exploit DB Packet Storm
309620 - phenotype-cms phenotype_cms SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted… CWE-89
SQL Injection
CVE-2011-0407 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm