Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1261 7.8 重要
Local 		NVIDIA NVTabular NVIDIAのNVTabularにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-24237 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
1262 6.8 警告
Network 		SWUpdate SWUpdate SWUpdateにおける複数の脆弱性 CWE-125
CWE-191
CVE-2026-28525 2026-06-8 11:49 2026-04-23 Show GitHub Exploit DB Packet Storm
1263 7.5 重要
Network 		turbo-stream
Shopify		 React Router
Turbo Stream 		Shopify等の複数ベンダの製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-34077 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
1264 6.5 警告
Network 		Apnotic Password Pusher ApnoticのPassword Pusherにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
CWE-noinfo
CVE-2026-41308 2026-06-8 11:48 2026-05-8 Show GitHub Exploit DB Packet Storm
1265 7.5 重要
Network 		Shopify remix-run/server-runtime
React Router 		ShopifyのReact Router等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-42342 2026-06-8 11:48 2026-06-2 Show GitHub Exploit DB Packet Storm
1266 5.3 警告
Network 		forms project forms NextcloudのFormsにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2026-45543 2026-06-8 11:48 2026-06-1 Show GitHub Exploit DB Packet Storm
1267 8.1 重要
Network 		Get-hermes Hermes Web UI Get-hermesのHermes Web UIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-6832 2026-06-8 11:48 2026-04-21 Show GitHub Exploit DB Packet Storm
1268 8.8 重要
Network 		radare Radare2 MCP Server radareのRadare2 MCP ServerにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-6942 2026-06-8 11:48 2026-04-23 Show GitHub Exploit DB Packet Storm
1269 7.3 重要
Network 		Securly, Inc. Securly Securly, Inc.のSecurlyにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-8876 2026-06-8 11:48 2026-06-3 Show GitHub Exploit DB Packet Storm
1270 7.5 重要
Network 		Securly, Inc. Securly Securly, Inc.のSecurlyにおける暗号強度に関する脆弱性 CWE-326
不適切な暗号強度 		CVE-2026-8878 2026-06-8 11:48 2026-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310611 - netwin surgemail Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program. CWE-79
Cross-site Scripting 		CVE-2010-3201 2024-11-21 10:18 2011-01-8 Show GitHub Exploit DB Packet Storm
310612 - linux linux_kernel drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-3448 2024-11-21 10:18 2011-01-4 Show GitHub Exploit DB Packet Storm
310613 - intel
symantec 		intel_alert_management_system
antivirus
endpoint_protection 		The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec An… CWE-20
 Improper Input Validation  		CVE-2010-3268 2024-11-21 10:18 2010-12-23 Show GitHub Exploit DB Packet Storm
310614 - microsoft internet_explorer Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified s… CWE-200
Information Exposure 		CVE-2010-3348 2024-11-21 10:18 2010-12-17 Show GitHub Exploit DB Packet Storm
310615 - microsoft internet_explorer Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialize… CWE-908
 Use of Uninitialized Resource 		CVE-2010-3346 2024-11-21 10:18 2010-12-17 Show GitHub Exploit DB Packet Storm
310616 - microsoft internet_explorer Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) i… CWE-908
 Use of Uninitialized Resource 		CVE-2010-3345 2024-11-21 10:18 2010-12-17 Show GitHub Exploit DB Packet Storm
310617 - microsoft internet_explorer Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) i… CWE-908
 Use of Uninitialized Resource 		CVE-2010-3343 2024-11-21 10:18 2010-12-17 Show GitHub Exploit DB Packet Storm
310618 - microsoft internet_explorer Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified s… CWE-200
Information Exposure 		CVE-2010-3342 2024-11-21 10:18 2010-12-17 Show GitHub Exploit DB Packet Storm
310619 - microsoft internet_explorer Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or… CWE-94
Code Injection 		CVE-2010-3340 2024-11-21 10:18 2010-12-17 Show GitHub Exploit DB Packet Storm
310620 - microsoft windows_server_2008
windows_7
windows_vista 		The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allo… CWE-20
 Improper Input Validation  		CVE-2010-3338 2024-11-21 10:18 2010-12-17 Show GitHub Exploit DB Packet Storm