Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1211	7.8	重要 Local	BitDefender	napoca	BitDefenderのnapocaにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-10046	2026-06-9 14:12	2026-06-2	Show	GitHub Exploit DB Packet Storm

1212	7.8	重要 Local	BitDefender	napoca	BitDefenderのnapocaにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-10047	2026-06-9 14:11	2026-06-2	Show	GitHub Exploit DB Packet Storm

1213	6.5	警告 Adjacent	エリクソン	Packet Core Gateway (PCG)	エリクソンのPacket Core Gateway (PCG)における不正な構文構造の不適切な処理に関する脆弱性	CWE-228 不正な構文構造の不適切な処理	CVE-2026-25657	2026-06-9 14:11	2026-06-5	Show	GitHub Exploit DB Packet Storm

1214	6.5	警告 Adjacent	エリクソン	Packet Core Gateway (PCG)	エリクソンのPacket Core Gateway (PCG)における欠損値の不適切な処理に関する脆弱性	CWE-230 欠損値の不適切な処理	CVE-2026-25658	2026-06-9 14:11	2026-06-5	Show	GitHub Exploit DB Packet Storm

1215	6.5	警告 Adjacent	エリクソン	Packet Core Gateway (PCG)	エリクソンのPacket Core Gateway (PCG)における欠損値の不適切な処理に関する脆弱性	CWE-230 欠損値の不適切な処理	CVE-2026-25659	2026-06-9 14:11	2026-06-5	Show	GitHub Exploit DB Packet Storm

1216	9.8	緊急 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるデフォルトのパスワードの使用に関する脆弱性	CWE-1393 デフォルトのパスワードの使用	CVE-2026-35075	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

1217	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35076	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

1218	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35077	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

1219	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35078	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

1220	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35079	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310171	-	otrs	otrs	Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circ…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-4768	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310172	-	otrs	otrs	Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, whic…	CWE-20 Improper Input Validation	CVE-2010-4767	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310173	-	otrs	otrs	The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially …	CWE-20 Improper Input Validation	CVE-2010-4766	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310174	-	otrs	otrs	Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic…	CWE-362 Race Condition	CVE-2010-4765	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310175	-	otrs	otrs	Open Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypted e-mail messages that were based on revoked PGP or GPG keys, which makes it ea…	CWE-255 Credentials Management	CVE-2010-4764	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310176	-	otrs	otrs	The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-4763	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310177	-	otrs	otrs	The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-4761	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310178	-	otrs	otrs	Cross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request System (OTRS) before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2010-4762	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310179	-	otrs	otrs	Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain …	CWE-200 Information Exposure	CVE-2010-4760	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm

310180	-	otrs	otrs	Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of ser…	CWE-20 Improper Input Validation	CVE-2010-4759	2024-11-21 10:21	2011-03-19	Show	GitHub Exploit DB Packet Storm