Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1231	7.5	重要 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-49187	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1232	9.8	緊急 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおけるアクティブ状態のデバッグコードに関する脆弱性	CWE-489 間違ったセッションへのデータの漏洩	CVE-2026-49188	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1233	7.8	重要 Local	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-49189	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1234	8.8	重要 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-49190	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1235	9.8	緊急 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-49191	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1236	5.4	警告 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-49192	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1237	7.5	重要 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-49193	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1238	8.8	重要 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-49194	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

1239	9.8	緊急 Network	日本エイサー	Predator Connect W6x Firmware	エイサーのPredator Connect W6x Firmwareにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-49199	2026-06-8 11:50	2026-05-29	Show	GitHub Exploit DB Packet Storm

1240	8.6	重要 Network	日本エイサー	Acer Connect M6E 5G Firmware	エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-49202	2026-06-8 11:50	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310501	-	rene_tegel	visual_synapse	Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.	CWE-22 Path Traversal	CVE-2010-3743	2024-11-21 10:19	2010-10-9	Show	GitHub Exploit DB Packet Storm

310502	-	freeradius	freeradius	The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requ…	CWE-399 Resource Management Errors	CVE-2010-3697	2024-11-21 10:19	2010-10-8	Show	GitHub Exploit DB Packet Storm

310503	-	freeradius	freeradius	The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause …	CWE-399 Resource Management Errors	CVE-2010-3696	2024-11-21 10:19	2010-10-8	Show	GitHub Exploit DB Packet Storm

310504	-	apereo	phpcas	Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directo…	CWE-22 Path Traversal	CVE-2010-3692	2024-11-21 10:19	2010-10-8	Show	GitHub Exploit DB Packet Storm

310505	-	apereo	phpcas	PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.	CWE-59 Link Following	CVE-2010-3691	2024-11-21 10:19	2010-10-8	Show	GitHub Exploit DB Packet Storm

310506	-	apereo	phpcas	Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting …	CWE-79 Cross-site Scripting	CVE-2010-3690	2024-11-21 10:19	2010-10-8	Show	GitHub Exploit DB Packet Storm

310507	-	alvaro_herrera	pl\/php	The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain p…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-3781	2024-11-21 10:19	2010-10-7	Show	GitHub Exploit DB Packet Storm

310508	-	dovecot	dovecot	Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.	NVD-CWE-Other	CVE-2010-3780	2024-11-21 10:19	2010-10-7	Show	GitHub Exploit DB Packet Storm

310509	-	dovecot	dovecot	Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass inten…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-3779	2024-11-21 10:19	2010-10-7	Show	GitHub Exploit DB Packet Storm

310510	-	dovecot	dovecot	plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a direc…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-3707	2024-11-21 10:19	2010-10-7	Show	GitHub Exploit DB Packet Storm