Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1611	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43070	2026-06-3 17:01	2026-05-5	Show	GitHub Exploit DB Packet Storm

1612	9.1	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43071	2026-06-3 17:01	2026-05-5	Show	GitHub Exploit DB Packet Storm

1613	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43072	2026-06-3 17:01	2026-05-5	Show	GitHub Exploit DB Packet Storm

1614	5.4	警告 Network	networktocode	nautobot	networktocodeのnautobotにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-44794	2026-06-3 17:01	2026-05-28	Show	GitHub Exploit DB Packet Storm

1615	6.5	警告 Network	networktocode	nautobot	networktocodeのnautobotにおける複数の脆弱性	CWE-1333 CWE-400	CVE-2026-44796	2026-06-3 17:01	2026-05-28	Show	GitHub Exploit DB Packet Storm

1616	8.5	重要 Network	networktocode	nautobot	networktocodeのnautobotにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-44797	2026-06-3 17:01	2026-05-28	Show	GitHub Exploit DB Packet Storm

1617	8.2	重要 Network	langchain	langchain	langchainにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-44843	2026-06-3 17:01	2026-05-26	Show	GitHub Exploit DB Packet Storm

1618	9.6	緊急 Network	amirraminfar	dozzle	Amir RaminfarのDozzleにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-44985	2026-06-3 17:01	2026-05-26	Show	GitHub Exploit DB Packet Storm

1619	8.6	重要 Network	amirraminfar	dozzle	Amir RaminfarのDozzleにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-45298	2026-06-3 17:01	2026-05-26	Show	GitHub Exploit DB Packet Storm

1620	8.5	重要 Network	オラクル	Oracle Financials Common Modules	オラクルのOracle Financials Common Modulesにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-46820	2026-06-3 17:01	2026-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311171	-		ibm	websphere_mq	IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information b…	CWE-310 Cryptographic Issues	CVE-2010-2637	2024-11-21 10:17	2010-11-13	Show	GitHub Exploit DB Packet Storm

311172	-		microsoft	forefront_unified_access_gateway	Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitra…	CWE-79 Cross-site Scripting	CVE-2010-2734	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311173	-		microsoft	forefront_unified_access_gateway	Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary…	CWE-79 Cross-site Scripting	CVE-2010-2733	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311174	-		microsoft	forefront_unified_access_gateway	Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary…	CWE-20 Improper Input Validation	CVE-2010-2732	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311175	-		horde	horde_application_framework	Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir paramet…	CWE-79 Cross-site Scripting	CVE-2010-3077	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311176	-		cisco	intelligent_contact_manager	Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-3040	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311177	-		cisco	unified_communications_manager	/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via …	CWE-78 OS Command	CVE-2010-3039	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311178	-		ibm	websphere_commerce	Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2010-2636	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311179	-		ibm	websphere_commerce	SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admi…	CWE-89 SQL Injection	CVE-2010-2635	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311180	9.8	CRITICAL Network	apple fedoraproject canonical debian opensuse suse redhat	cups mac_os_x_server mac_os_x fedora ubuntu_linux debian_linux opensuse linux_enterprise_server linux_enterprise enterprise_linux_server enterprise_linux enterprise_l…	ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-f…	CWE-416 Use After Free	CVE-2010-2941	2024-11-21 10:17	2010-11-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed