Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1541 6.1 警告
Network 		Mistune project Mistune Mistune projectのMistuneにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44896 2026-06-3 15:35 2026-05-26 Show GitHub Exploit DB Packet Storm
1542 6.1 警告
Network 		Mistune project Mistune Mistune projectのMistuneにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44897 2026-06-3 15:35 2026-05-26 Show GitHub Exploit DB Packet Storm
1543 6.1 警告
Network 		Mistune project Mistune Mistune projectのMistuneにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44898 2026-06-3 15:35 2026-05-26 Show GitHub Exploit DB Packet Storm
1544 6.1 警告
Network 		Mistune project Mistune Mistune projectのMistuneにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44899 2026-06-3 15:35 2026-05-26 Show GitHub Exploit DB Packet Storm
1545 10 緊急
Network 		The Go Project crypto The Go Projectのcryptoにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-46595 2026-06-3 15:35 2026-05-22 Show GitHub Exploit DB Packet Storm
1546 7.5 重要
Network 		The Go Project crypto The Go Projectのcryptoにおける不正な型変換に関する脆弱性 CWE-704
不正な型変換またはキャスト 		CVE-2026-46597 2026-06-3 15:35 2026-05-22 Show GitHub Exploit DB Packet Storm
1547 5.3 警告
Network 		The Go Project crypto The Go Projectのcryptoにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-46598 2026-06-3 15:35 2026-05-22 Show GitHub Exploit DB Packet Storm
1548 7.5 重要
Network 		benoitc hackney benoitcのhackneyにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-47072 2026-06-3 15:35 2026-05-25 Show GitHub Exploit DB Packet Storm
1549 7.5 重要
Network 		benoitc hackney benoitcのhackneyにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-47075 2026-06-3 15:35 2026-05-25 Show GitHub Exploit DB Packet Storm
1550 5.4 警告
Network 		TinyBrowser tinymce TinyBrowserのtinymceにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-47759 2026-06-3 15:35 2026-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310921 - lynx lynx Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote attackers to cause a denial of service (applicat… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2810 2024-11-21 10:17 2010-08-21 Show GitHub Exploit DB Packet Storm
310922 - strongswan strongswan The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted… CWE-94
Code Injection 		CVE-2010-2628 2024-11-21 10:17 2010-08-21 Show GitHub Exploit DB Packet Storm
310923 - uzbl uzbl The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands… CWE-94
Code Injection 		CVE-2010-2809 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm
310924 - freetype freetype Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (a… NVD-CWE-noinfo
CVE-2010-3054 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm
310925 - freetype freetype bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static… CWE-20
 Improper Input Validation  		CVE-2010-3053 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm
310926 - squirrelmail squirrelmail functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service (disk consumption) by makin… CWE-399
 Resource Management Errors 		CVE-2010-2813 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm
310927 - freetype
apple
canonical 		freetype
mac_os_x
iphone_os
tvos
ubuntu_linux 		Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or poss… CWE-120
Classic Buffer Overflow 		CVE-2010-2808 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm
310928 - freetype
canonical
apple 		freetype
ubuntu_linux
mac_os_x
iphone_os
tvos 		FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a… CWE-681
 Incorrect Conversion between Numeric Types 		CVE-2010-2807 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm
310929 - freetype
canonical
apple 		freetype
ubuntu_linux
mac_os_x
iphone_os
tvos 		Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary … CWE-129
 Improper Validation of Array Index 		CVE-2010-2806 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm
310930 - freetype
canonical
apple 		freetype
ubuntu_linux
mac_os_x
iphone_os
tvos 		The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (applicati… CWE-20
 Improper Input Validation  		CVE-2010-2805 2024-11-21 10:17 2010-08-20 Show GitHub Exploit DB Packet Storm