Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1551	9.9	緊急 Network	オラクル	Oracle iAssets	オラクルのOracle iAssetsにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-46822	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

1552	7.5	重要 Network	fastify	fastify/accepts-serializer	fastifyのfastify/accepts-serializerにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-7768	2026-06-3 17:04	2026-05-4	Show	GitHub Exploit DB Packet Storm

1553	8.8	重要 Local	NanoCo	NanoClaw	NanoCoのNanoClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-7875	2026-06-3 17:04	2026-05-6	Show	GitHub Exploit DB Packet Storm

1554	6.5	警告 Network	Synology Inc.	SSL VPN Client	Synology Inc.のSSL VPN Clientにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2021-47960	2026-06-3 17:04	2026-04-10	Show	GitHub Exploit DB Packet Storm

1555	8.1	重要 Network	Synology Inc.	SSL VPN Client	Synology Inc.のSSL VPN Clientにおける認証情報の平文保存に関する脆弱性	CWE-256 平文でパスワードを保存	CVE-2021-47961	2026-06-3 17:04	2026-04-10	Show	GitHub Exploit DB Packet Storm

1556	7.5	重要 Network	デル	Dell Unisphere for PowerMax Virtual Appliance	デルのDell Unisphere for PowerMax Virtual Applianceにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2022-34363	2026-06-3 17:04	2026-05-22	Show	GitHub Exploit DB Packet Storm

1557	7.8	重要 Local	Synology Inc.	BeeDrive	Synology Inc.のBeeDriveにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2023-52945	2026-06-3 17:04	2026-05-27	Show	GitHub Exploit DB Packet Storm

1558	6.5	警告 Network	Apache Software Foundation	Ignite	Apache Software FoundationのIgniteにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2025-48977	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

1559	9.1	緊急 Network	Palo Alto Networks	PAN-OS Prisma Access	Palo Alto NetworksのPAN-OS等の複数製品における検証および完全性チェックを行っていない Cookie への依存に関する脆弱性	CWE-565 検証および完全性チェックを行っていない Cookie への依存	CVE-2026-0257	2026-06-3 17:04	2026-05-13	Show	GitHub Exploit DB Packet Storm

1560	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-10001	2026-06-3 17:04	2026-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310781	-	clamav	clamav	Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-3434	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

310782	-	ffmpeg mplayerhq	libavcodec ffmpeg mplayer	flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset …	CWE-94 Code Injection	CVE-2010-3429	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

310783	-	linux suse opensuse debian canonical	linux_kernel linux_enterprise_desktop linux_enterprise_server opensuse linux_enterprise_real_time_extension debian_linux ubuntu_linux	The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensi…	CWE-200 Information Exposure	CVE-2010-3298	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

310784	-	linux suse opensuse debian canonical	linux_kernel linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_real_time_extension debian_linux ubuntu_linux	The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensit…	CWE-909 Missing Initialization of Resource	CVE-2010-3297	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

310785	-	linux suse opensuse debian canonical	linux_kernel linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_real_time_extension debian_linux ubuntu_linux	The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain p…	CWE-200 Information Exposure	CVE-2010-3296	2024-11-21 10:18	2010-10-1	Show	GitHub Exploit DB Packet Storm

310786	-	blueriver	sava_cms mura_cms	Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CMS 5 through 5.2, allows remote attackers to read arbitrary files via a .. (dot …	CWE-22 Path Traversal	CVE-2010-3468	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

310787	-	llnl	slurm	The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared l…	NVD-CWE-Other	CVE-2010-3380	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

310788	-	linux debian canonical	linux_kernel debian_linux ubuntu_linux	Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have u…	CWE-189 Numeric Errors	CVE-2010-3310	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

310789	-	drupal peter_wolanin	drupal openid	The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, which allows remote att…	CWE-287 Improper Authentication	CVE-2010-3091	2024-11-21 10:18	2010-09-30	Show	GitHub Exploit DB Packet Storm

310790	-	sangoma	freepbx	Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to c…	CWE-22 Path Traversal	CVE-2010-3490	2024-11-21 10:18	2010-09-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed