Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1321	8.8	重要 Network	Jenkins プロジェクト	Email Extension Plugin	JenkinsのEmail Extension Pluginにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-48920	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1322	7.5	重要 Network	Jenkins プロジェクト	Credentials Binding	JenkinsのCredentials Bindingにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-48922	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1323	4.3	警告 Network	Jenkins プロジェクト	AppSpider	JenkinsのAppSpiderにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-48923	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1324	4.3	警告 Network	Jenkins プロジェクト	Bitbucket OAuth	JenkinsのBitbucket OAuthにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-48924	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1325	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-5272	2026-06-3 15:34	2026-04-1	Show	GitHub Exploit DB Packet Storm

1326	5.5	警告 Local	IBM	IBM App Connect Enterprise	IBMのIBM App Connect Enterpriseにおける重要な情報のセキュアでない格納に関する脆弱性	CWE-922 重要な情報のセキュアでない格納	CVE-2026-5515	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1327	8.8	重要 Network	Agilonhealth (MphRx)	Minerva	Agilonhealth (MphRx)のMinervaにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-5781	2026-06-3 15:34	2026-04-28	Show	GitHub Exploit DB Packet Storm

1328	7.5	重要 Network	IBM	IBM DB2	IBMのIBM DB2におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-6051	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1329	7.5	重要 Network	IBM	IBM DB2	IBMのIBM DB2におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-6052	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1330	5.5	警告 Local	IBM	IBM DB2	IBMのIBM DB2における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-6053	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310881	-	saschart	sascam_webcam_server	Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash) via a large number of requests with a long line, as demonstrated using a long G…	CWE-20 Improper Input Validation	CVE-2010-2505	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310882	-	splunk	splunk	Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.	NVD-CWE-Other	CVE-2010-2504	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310883	-	splunk	splunk	Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) redirects, aka SPL-31067; …	CWE-79 Cross-site Scripting	CVE-2010-2503	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310884	-	splunk	splunk	Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to mo…	CWE-22 Path Traversal	CVE-2010-2502	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310885	-	mozilla	bugzilla	Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is enabled, uses world-readable permissions within (1) .bzr/ and (2) data/webdot/, which allows local user…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-2470	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310886	-	moodle	moodle	Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of…	CWE-352 Origin Validation Error	CVE-2010-2231	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310887	-	moodle	moodle	The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site sc…	CWE-79 Cross-site Scripting	CVE-2010-2230	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310888	-	moodle	moodle	Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web script or HTML via unspecified para…	CWE-79 Cross-site Scripting	CVE-2010-2229	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310889	-	moodle	moodle	Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors…	CWE-79 Cross-site Scripting	CVE-2010-2228	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

310890	-	linearcorp	emerge_50 emerge_5000	The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the de…	CWE-255 Credentials Management	CVE-2010-2469	2024-11-21 10:16	2010-06-26	Show	GitHub Exploit DB Packet Storm