Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
751 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-6277 2026-06-12 14:44 2026-06-11 Show GitHub Exploit DB Packet Storm
752 8.7 重要
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-6552 2026-06-12 14:44 2026-06-11 Show GitHub Exploit DB Packet Storm
753 3.7
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-6976 2026-06-12 14:44 2026-06-11 Show GitHub Exploit DB Packet Storm
754 7.5 重要
Network
GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-7250 2026-06-12 14:44 2026-06-11 Show GitHub Exploit DB Packet Storm
755 8.7 重要
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-8589 2026-06-12 14:44 2026-06-11 Show GitHub Exploit DB Packet Storm
756 6.5 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-9204 2026-06-12 14:44 2026-06-11 Show GitHub Exploit DB Packet Storm
757 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける置換文字列の無害化に関する脆弱性 CWE-153
置換文字列の不適切な無害化
CVE-2026-9694 2026-06-12 14:44 2026-06-11 Show GitHub Exploit DB Packet Storm
758 7.8 重要
Local
The Open Group Unix opengroupのUnixにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2025-71263 2026-06-12 14:35 2026-03-13 Show GitHub Exploit DB Packet Storm
759 7.5 重要
Network
Dana Powers (dpkp) kafka-python Dana Powers (dpkp)のkafka-pythonにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て
CVE-2026-10142 2026-06-12 14:35 2026-06-10 Show GitHub Exploit DB Packet Storm
760 7.5 重要
Network
Dana Powers (dpkp) kafka-python Dana Powers (dpkp)のkafka-pythonにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-10143 2026-06-12 14:35 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309621 - wellintech kingview Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0406 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309622 - phpgedview phpgedview Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory trave… CWE-22
Path Traversal
CVE-2011-0405 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309623 - netsupport netsupport_manager_agent Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0404 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309624 - imgburn imgburn Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacki… NVD-CWE-Other
CVE-2011-0403 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309625 - debian dpkg dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory. CWE-59
Link Following
CVE-2011-0402 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309626 - troglobit pimd pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on (1) pimd.dump when a USR1 signal is sent, or (2) pimd.cache when USR2 is… CWE-59
Link Following
CVE-2011-0007 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309627 - joomla com_search Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.p… CWE-79
Cross-site Scripting
CVE-2011-0005 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309628 - mediawiki mediawiki MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2011-0003 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309629 - matomo matomo Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service (inode consumption) by establishing many sessi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-0401 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm
309630 - matomo matomo Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmiss… CWE-16
Configuration
CVE-2011-0400 2024-11-21 10:23 2011-01-11 Show GitHub Exploit DB Packet Storm