Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1271 7.5 重要
Network
Securly, Inc. Securly Securly, Inc.のSecurlyにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-8879 2026-06-8 11:48 2026-06-3 Show GitHub Exploit DB Packet Storm
1272 7.8 重要
Local
Amazon.com, Inc. Kiro CLI Amazon.com, Inc.のKiro CLIにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-9255 2026-06-8 11:48 2026-05-22 Show GitHub Exploit DB Packet Storm
1273 9.9 緊急
Network
Flowintel Flowintel Flowintelにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-9813 2026-06-8 11:48 2026-05-28 Show GitHub Exploit DB Packet Storm
1274 7.8 重要
Local
huggingface transformers huggingfaceのtransformersにおける複数の脆弱性 CWE-1066
CWE-502
CVE-2026-4372 2026-06-8 11:48 2026-05-24 Show GitHub Exploit DB Packet Storm
1275 6.1 警告
Network
Avatar Uploader project Avatar Uploader Avatar Uploader projectのAvatar Uploaderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2022-50957 2026-06-8 11:48 2026-05-10 Show GitHub Exploit DB Packet Storm
1276 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如
CVE-2025-71273 2026-06-8 11:48 2026-05-6 Show GitHub Exploit DB Packet Storm
1277 7.5 重要
Network
Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-10701 2026-06-8 11:48 2026-06-2 Show GitHub Exploit DB Packet Storm
1278 4.3 警告
Network
Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え
CVE-2026-10702 2026-06-8 11:48 2026-06-2 Show GitHub Exploit DB Packet Storm
1279 3.6
Local
lfprojects mlflow lfprojectsのmlflowにおける複数の脆弱性 CWE-327
CWE-328
CVE-2026-10803 2026-06-8 11:48 2026-06-4 Show GitHub Exploit DB Packet Storm
1280 6.5 警告
Adjacent
TP-LINK Technologies tapo c200 ファームウェア TP-LINK Technologiesのtapo c200 ファームウェアにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-1871 2026-06-8 11:48 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311241 - djangoproject django Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie. CWE-79
Cross-site Scripting
CVE-2010-3082 2024-11-21 10:17 2010-09-15 Show GitHub Exploit DB Packet Storm
311242 - scott_james_remnant mountall mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file. CWE-362
Race Condition
CVE-2010-2961 2024-11-21 10:17 2010-09-15 Show GitHub Exploit DB Packet Storm
311243 - apache couchdb Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current worki… NVD-CWE-Other
CVE-2010-2953 2024-11-21 10:17 2010-09-15 Show GitHub Exploit DB Packet Storm
311244 - hp data_protector_express Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 on Windows allows local users to gain… NVD-CWE-noinfo
CVE-2010-3008 2024-11-21 10:17 2010-09-14 Show GitHub Exploit DB Packet Storm
311245 - apache traffic_server Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, w… CWE-20
 Improper Input Validation 
CVE-2010-2952 2024-11-21 10:17 2010-09-14 Show GitHub Exploit DB Packet Storm
311246 - hp proliant_g6_lights-out_100_remote_management Unspecified vulnerability on the HP ProLiant G6 Lights-Out 100 Remote Management card with firmware before 4.06 allows remote attackers to cause a denial of service via unknown vectors. NVD-CWE-noinfo
CVE-2010-3006 2024-11-21 10:17 2010-09-11 Show GitHub Exploit DB Packet Storm
311247 - todd_miller sudo Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a comman… NVD-CWE-Other
CVE-2010-2956 2024-11-21 10:17 2010-09-11 Show GitHub Exploit DB Packet Storm
311248 - quagga quagga bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS … NVD-CWE-Other
CVE-2010-2949 2024-11-21 10:17 2010-09-11 Show GitHub Exploit DB Packet Storm
311249 - quagga quagga Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2948 2024-11-21 10:17 2010-09-11 Show GitHub Exploit DB Packet Storm
311250 - cisco wireless_lan_controller_software Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unin… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-3034 2024-11-21 10:17 2010-09-11 Show GitHub Exploit DB Packet Storm