Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1101	8.1	重要 Network	Zabbix	Zabbix	Zabbixにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-23925	2026-06-8 12:32	2026-03-6	Show	GitHub Exploit DB Packet Storm

1102	5.3	警告 Network	OpenStack	Openstack Keystone	OpenStackのOpenstack Keystoneにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-33551	2026-06-8 12:32	2026-04-10	Show	GitHub Exploit DB Packet Storm

1103	6.5	警告 Network	Mattermost, Inc.	Mattermost Desktop	Mattermost, Inc.のMattermost Desktopにおけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性	CWE-939 カスタム URL スキームのハンドラの不適切な認可	CVE-2026-3471	2026-06-8 12:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

1104	7.3	重要 Local	AIOHTTP	AIOHTTP	AIOHTTPにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-34993	2026-06-8 12:31	2026-06-2	Show	GitHub Exploit DB Packet Storm

1105	3.1	低 Network	Django Software Foundation	Django	Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性	CWE-524 重要な情報を含むキャッシュの使用	CVE-2026-35193	2026-06-8 12:31	2026-06-3	Show	GitHub Exploit DB Packet Storm

1106	6.1	警告 Network	citeum	opencti	citeumのopenctiにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-35212	2026-06-8 12:31	2026-06-2	Show	GitHub Exploit DB Packet Storm

1107	8.2	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-37234	2026-06-8 12:31	2026-06-1	Show	GitHub Exploit DB Packet Storm

1108	7.8	重要 Local	radare	radare2	radareのradare2におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-40527	2026-06-8 12:31	2026-04-17	Show	GitHub Exploit DB Packet Storm

1109	7.5	重要 Network	quic-go project	quic-go	quic-go projectのquic-goにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40898	2026-06-8 12:31	2026-06-4	Show	GitHub Exploit DB Packet Storm

1110	6.5	警告 Network	VMware	Spring Cloud Function	VMwareのSpring Cloud Functionにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-40989	2026-06-8 12:31	2026-06-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310391	-	linux debian	linux_kernel debian_linux	The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from ker…	CWE-909 Missing Initialization of Resource	CVE-2010-3877	2024-11-21 10:19	2011-01-4	Show	GitHub Exploit DB Packet Storm

310392	-	linux suse opensuse debian	linux_kernel linux_enterprise_server opensuse linux_enterprise_desktop linux_enterprise_software_development_kit linux_enterprise_real_time_extension debian_linux	net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel s…	CWE-909 Missing Initialization of Resource	CVE-2010-3876	2024-11-21 10:19	2011-01-4	Show	GitHub Exploit DB Packet Storm

310393	-	linux debian	linux_kernel debian_linux	The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information fro…	CWE-200 Information Exposure	CVE-2010-3875	2024-11-21 10:19	2011-01-4	Show	GitHub Exploit DB Packet Storm

310394	-	linux suse opensuse debian	linux_kernel linux_enterprise_server opensuse debian_linux	The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possib…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-3873	2024-11-21 10:19	2011-01-4	Show	GitHub Exploit DB Packet Storm

310395	-	mitsu_hiro_hi_rose	attachecase	Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory.	NVD-CWE-Other	CVE-2010-3923	2024-11-21 10:19	2010-12-31	Show	GitHub Exploit DB Packet Storm

310396	-	redhat	jboss_enterprise_application_platform	Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack th…	CWE-352 Origin Validation Error	CVE-2010-3878	2024-11-21 10:19	2010-12-31	Show	GitHub Exploit DB Packet Storm

310397	-	redhat	jboss_remoting jboss_enterprise_application_platform jboss_enterprise_web_platform	The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise …	CWE-20 Improper Input Validation	CVE-2010-3862	2024-11-21 10:19	2010-12-31	Show	GitHub Exploit DB Packet Storm

310398	-	redhat	jboss_enterprise_application_platform jboss_enterprise_soa_platform	The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports…	CWE-20 Improper Input Validation	CVE-2010-3708	2024-11-21 10:19	2010-12-31	Show	GitHub Exploit DB Packet Storm

310399	-	linux suse debian canonical	linux_kernel linux_enterprise_server linux_enterprise_desktop linux_enterprise_software_development_kit linux_enterprise_real_time_extension debian_linux ubuntu_linux	The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions …	NVD-CWE-noinfo	CVE-2010-3850	2024-11-21 10:19	2010-12-31	Show	GitHub Exploit DB Packet Storm

310400	-	linux suse debian canonical	linux_kernel linux_enterprise_server linux_enterprise_desktop linux_enterprise_software_development_kit linux_enterprise_real_time_extension debian_linux ubuntu_linux	The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer derefere…	CWE-476 NULL Pointer Dereference	CVE-2010-3849	2024-11-21 10:19	2010-12-31	Show	GitHub Exploit DB Packet Storm