Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1551 7.8 重要
Local
Canonical Ubuntu CanonicalのUbuntuにおける権限の連鎖に関する脆弱性 CWE-268
権限の連鎖
CVE-2026-3888 2026-06-8 11:50 2026-03-17 Show GitHub Exploit DB Packet Storm
1552 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-49185 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1553 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-49186 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1554 7.5 重要
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-49187 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1555 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるアクティブ状態のデバッグコードに関する脆弱性 CWE-489
間違ったセッションへのデータの漏洩
CVE-2026-49188 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1556 7.8 重要
Local
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-49189 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1557 8.8 重要
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-49190 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1558 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-49191 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1559 5.4 警告
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-49192 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1560 7.5 重要
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-49193 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310511 - redhat jboss_enterprise_application_platform Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack th… CWE-352
 Origin Validation Error
CVE-2010-3878 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310512 - redhat jboss_remoting
jboss_enterprise_application_platform
jboss_enterprise_web_platform
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise … CWE-20
 Improper Input Validation 
CVE-2010-3862 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310513 - redhat jboss_enterprise_application_platform
jboss_enterprise_soa_platform
The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports… CWE-20
 Improper Input Validation 
CVE-2010-3708 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310514 - linux
suse
debian
canonical
linux_kernel
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
debian_linux
ubuntu_linux
The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions … NVD-CWE-noinfo
CVE-2010-3850 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310515 - linux
suse
debian
canonical
linux_kernel
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
debian_linux
ubuntu_linux
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer derefere… CWE-476
 NULL Pointer Dereference
CVE-2010-3849 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310516 - linux
suse
debian
canonical
linux_kernel
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
debian_linux
ubuntu_linux
Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges b… CWE-787
 Out-of-bounds Write
CVE-2010-3848 2024-11-21 10:19 2010-12-31 Show GitHub Exploit DB Packet Storm
310517 - linux
fedoraproject
suse
opensuse
debian
linux_kernel
fedora
linux_enterprise_desktop
linux_enterprise_server
opensuse
linux_enterprise_real_time_extension
debian_linux
Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit p… CWE-787
 Out-of-bounds Write
CVE-2010-3874 2024-11-21 10:19 2010-12-30 Show GitHub Exploit DB Packet Storm
310518 - linux
debian
linux_kernel
debian_linux
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer ove… CWE-787
 Out-of-bounds Write
CVE-2010-3859 2024-11-21 10:19 2010-12-30 Show GitHub Exploit DB Packet Storm
310519 - microsoft wmi_administrative_tools The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary c… CWE-94
Code Injection
CVE-2010-3973 2024-11-21 10:19 2010-12-24 Show GitHub Exploit DB Packet Storm
310520 - microsoft internet_information_services Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-3972 2024-11-21 10:19 2010-12-24 Show GitHub Exploit DB Packet Storm