Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1471 4.3 警告
Network 		Synology Inc. Hyper Backup Synology Inc.のHyper Backupにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-47273 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
1472 5.5 警告
Local 		Vivo EasyShare VivoのEasyShareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-15515 2026-06-8 12:28 2026-03-13 Show GitHub Exploit DB Packet Storm
1473 8.6 重要
Network 		Belden Inc. HiOS Switch Software Belden Inc.のHiOS Switch Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-15620 2026-06-8 12:28 2026-04-2 Show GitHub Exploit DB Packet Storm
1474 4.9 警告
Network 		Extreme Networks, Inc. ExtremeCloud IQ Site Engine Extreme Networks, Inc.のExtremeCloud IQ Site Engineにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-0689 2026-06-8 12:28 2026-03-2 Show GitHub Exploit DB Packet Storm
1475 9.8 緊急
Network 		Tesseract OCR project Tesseract OCR ZapolnochのTesseract OCRにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-26832 2026-06-8 12:28 2026-03-25 Show GitHub Exploit DB Packet Storm
1476 9.1 緊急
Network 		Bytedance Inc. DeerFlow Bytedance Inc.のDeerFlowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40518 2026-06-8 12:28 2026-04-17 Show GitHub Exploit DB Packet Storm
1477 5.3 警告
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41207 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
1478 9.8 緊急
Network 		DragonSoft Gcb/fcb Government Financial Cybersecurity Configuration Audit Software DragonSoftのGcb/fcb Government Financial Cybersecurity Configuration Audit Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-4312 2026-06-8 12:28 2026-03-17 Show GitHub Exploit DB Packet Storm
1479 5.5 警告
Local 		Linaro OP-TEE Trusted FirmwareのOP-TEEにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-45702 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
1480 9.1 緊急
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける複数の脆弱性 CWE-125
CWE-787
CVE-2026-48040 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310511 - redhat jboss_enterprise_application_platform Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack th… CWE-352
 Origin Validation Error 		CVE-2010-3878 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310512 - redhat jboss_remoting
jboss_enterprise_application_platform
jboss_enterprise_web_platform 		The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise … CWE-20
 Improper Input Validation  		CVE-2010-3862 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310513 - redhat jboss_enterprise_application_platform
jboss_enterprise_soa_platform 		The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports… CWE-20
 Improper Input Validation  		CVE-2010-3708 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310514 - linux
suse
debian
canonical 		linux_kernel
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
debian_linux
ubuntu_linux 		The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions … NVD-CWE-noinfo
CVE-2010-3850 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310515 - linux
suse
debian
canonical 		linux_kernel
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
debian_linux
ubuntu_linux 		The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer derefere… CWE-476
 NULL Pointer Dereference 		CVE-2010-3849 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310516 - linux
suse
debian
canonical 		linux_kernel
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
debian_linux
ubuntu_linux 		Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges b… CWE-787
 Out-of-bounds Write 		CVE-2010-3848 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310517 - linux
fedoraproject
suse
opensuse
debian 		linux_kernel
fedora
linux_enterprise_desktop
linux_enterprise_server
opensuse
linux_enterprise_real_time_extension
debian_linux 		Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit p… CWE-787
 Out-of-bounds Write 		CVE-2010-3874 2024-11-21 10:19 2010-12-30 Show GitHub Exploit DB Packet Storm
310518 - linux
debian 		linux_kernel
debian_linux 		Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer ove… CWE-787
 Out-of-bounds Write 		CVE-2010-3859 2024-11-21 10:19 2010-12-30 Show GitHub Exploit DB Packet Storm
310519 - microsoft wmi_administrative_tools The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary c… CWE-94
Code Injection 		CVE-2010-3973 2024-11-21 10:19 2010-12-24 Show GitHub Exploit DB Packet Storm
310520 - microsoft internet_information_services Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-3972 2024-11-21 10:19 2010-12-24 Show GitHub Exploit DB Packet Storm