Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1201 7.5 重要
Network
lfprojects mlflow lfprojectsのmlflowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-2614 2026-05-29 11:17 2026-05-11 Show GitHub Exploit DB Packet Storm
1202 7.7 重要
Network
マイクロソフト Azure Stack HCI Azure Stack HCI の情報漏えいの脆弱性 CWE-20
不適切な入力確認
CVE-2026-26147 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
1203 8.8 重要
Network
NervesHub NervesHub NervesHubにおける複数の脆弱性 CWE-285
CWE-668
CVE-2026-28806 2026-05-29 11:17 2026-03-10 Show GitHub Exploit DB Packet Storm
1204 7.5 重要
Network
Gleam-wisp Wisp Gleam-wispのWispにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-28807 2026-05-29 11:17 2026-03-10 Show GitHub Exploit DB Packet Storm
1205 6.1 警告
Network
Joomla! Joomla! Joomla!におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-30894 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
1206 6.1 警告
Network
Joomla! Joomla! Joomla!におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-30895 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
1207 9.8 緊急
Network
マイクロソフト Microsoft Entra ID Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-33843 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
1208 4.3 警告
Network
Joomla! Joomla! Joomla!におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-35220 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
1209 9.8 緊急
Network
Joomla! Joomla! Joomla!におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-35221 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
1210 9.8 緊急
Network
Joomla! Joomla! Joomla!におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-35222 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310741 - apache couchdb Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation UR… CWE-352
 Origin Validation Error
CVE-2010-2234 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310742 - freetype
canonical
freetype
ubuntu_linux
Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a cra… CWE-120
Classic Buffer Overflow
CVE-2010-2541 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310743 - freetype
debian
canonical
freetype
debian_linux
ubuntu_linux
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. CWE-120
Classic Buffer Overflow
CVE-2010-2527 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310744 - freetype
canonical
apple
debian
freetype
ubuntu_linux
mac_os_x
debian_linux
Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (ap… CWE-787
 Out-of-bounds Write
CVE-2010-2520 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310745 - freetype
canonical
apple
debian
freetype
ubuntu_linux
mac_os_x
debian_linux
Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execut… CWE-787
 Out-of-bounds Write
CVE-2010-2519 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310746 - freetype
canonical
apple
debian
freetype
ubuntu_linux
mac_os_x
debian_linux
Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary c… CWE-190
 Integer Overflow or Wraparound
CVE-2010-2500 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310747 - freetype
canonical
apple
debian
freetype
ubuntu_linux
mac_os_x
debian_linux
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary… CWE-120
Classic Buffer Overflow
CVE-2010-2499 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310748 - freetype
canonical
apple
debian
freetype
ubuntu_linux
mac_os_x
debian_linux
The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap me… CWE-787
 Out-of-bounds Write
CVE-2010-2498 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310749 - freetype
apple
debian
freetype
mac_os_x
debian_linux
Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2010-2497 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm
310750 - libvirt libvirt Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP addre… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-2242 2024-11-21 10:16 2010-08-20 Show GitHub Exploit DB Packet Storm