Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 5.9 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける重要な情報を含むキャッシュの使用に関する脆弱性 New CWE-524
重要な情報を含むキャッシュの使用 		CVE-2026-41841 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
132 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-41842 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
133 5.9 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-41843 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
134 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41849 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
135 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるアルゴリズムの複雑さに関する脆弱性 New CWE-407
アルゴリズムの複雑性 		CVE-2026-41850 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
136 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41851 2026-06-10 14:27 2026-06-9 Show GitHub Exploit DB Packet Storm
137 9.1 緊急
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける誤った領域へのリソースの漏えいに関する脆弱性 New CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-42535 2026-06-10 14:27 2026-06-8 Show GitHub Exploit DB Packet Storm
138 7.5 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-42536 2026-06-10 14:27 2026-06-8 Show GitHub Exploit DB Packet Storm
139 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-46150 2026-06-10 14:27 2026-05-28 Show GitHub Exploit DB Packet Storm
140 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-46151 2026-06-10 14:27 2026-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310451 - google chrome Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, rela… NVD-CWE-noinfo
CVE-2010-3249 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
310452 - google
canonical 		chrome
ubuntu_linux 		Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and attack vectors. NVD-CWE-noinfo
CVE-2010-3248 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
310453 - google chrome Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of the URL bar via homographic sequences. CWE-20
 Improper Input Validation  		CVE-2010-3247 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
310454 - google chrome Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vect… NVD-CWE-noinfo
CVE-2010-3246 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
310455 - blackboard transact_suite The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2) database password in cleartext in (a) script and (b) batc… CWE-200
Information Exposure 		CVE-2010-3245 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
310456 - blackboard transact_suite BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml f… CWE-200
Information Exposure 		CVE-2010-3244 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
310457 - microsoft outlook_web_access Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that pe… CWE-352
 Origin Validation Error 		CVE-2010-3213 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
310458 - seagullproject.org seagull SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQuestion parameter in a retrieve action, in conjunction with… CWE-89
SQL Injection 		CVE-2010-3212 2024-11-21 10:18 2010-09-4 Show GitHub Exploit DB Packet Storm
310459 - jextn com_jefaqpro Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with … CWE-89
SQL Injection 		CVE-2010-3211 2024-11-21 10:18 2010-09-4 Show GitHub Exploit DB Packet Storm
310460 - martin_lee multi-lingual_e-commerce_system Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) checkout2… CWE-94
Code Injection 		CVE-2010-3210 2024-11-21 10:18 2010-09-4 Show GitHub Exploit DB Packet Storm