Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1711 5.3 警告
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41207 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
1712 9.8 緊急
Network 		DragonSoft Gcb/fcb Government Financial Cybersecurity Configuration Audit Software DragonSoftのGcb/fcb Government Financial Cybersecurity Configuration Audit Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-4312 2026-06-8 12:28 2026-03-17 Show GitHub Exploit DB Packet Storm
1713 5.5 警告
Local 		Linaro OP-TEE Trusted FirmwareのOP-TEEにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-45702 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
1714 9.1 緊急
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける複数の脆弱性 CWE-125
CWE-787
CVE-2026-48040 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
1715 9.8 緊急
Network 		マイクロソフト Azure HorizonDB Azure HorizonDB Elevation of Privilege Vulnerability CWE-290
スプーフィングによる認証回避 		CVE-2026-48567 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
1716 7.5 重要
Network 		マイクロソフト Microsoft Exchange Online Microsoft Exchange Online Information Disclosure Vulnerability CWE-285
不適切な認可 		CVE-2026-48579 2026-06-8 12:27 2026-06-4 Show GitHub Exploit DB Packet Storm
1717 9.1 緊急
Network 		CHORNY Apache::Session::Generate::ModUniqueId CHORNYのApache::Session::Generate::ModUniqueIdにおける予測可能な数字や識別子の生成に関する脆弱性 CWE-340
予測可能な数字や識別子の生成 		CVE-2026-5081 2026-06-8 12:27 2026-05-6 Show GitHub Exploit DB Packet Storm
1718 7.1 重要
Adjacent 		Securly, Inc. Securly Securly, Inc.のSecurlyにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-8874 2026-06-8 12:27 2026-06-3 Show GitHub Exploit DB Packet Storm
1719 7.5 重要
Network 		Securly, Inc. Securly Securly, Inc.のSecurlyにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-8881 2026-06-8 12:27 2026-06-3 Show GitHub Exploit DB Packet Storm
1720 7.5 重要
Network 		Securly, Inc. Securly Securly, Inc.のSecurlyにおける複数の脆弱性 CWE-1333
CWE-917
CVE-2026-8888 2026-06-8 12:27 2026-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310191 - blogcms blog\ Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php a… CWE-79
Cross-site Scripting 		CVE-2010-4749 2024-11-21 10:21 2011-03-2 Show GitHub Exploit DB Packet Storm
310192 - pmwiki pmwiki Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these… CWE-79
Cross-site Scripting 		CVE-2010-4748 2024-11-21 10:21 2011-03-2 Show GitHub Exploit DB Packet Storm
310193 - ahmattox processing_embed_plugin Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2010-4747 2024-11-21 10:21 2011-03-2 Show GitHub Exploit DB Packet Storm
310194 - fedoraproject 389_directory_server Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved application… CWE-399
 Resource Management Errors 		CVE-2010-4746 2024-11-21 10:21 2011-02-24 Show GitHub Exploit DB Packet Storm
310195 - gareth_watts phpxref Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string. CWE-79
Cross-site Scripting 		CVE-2010-4745 2024-11-21 10:21 2011-02-22 Show GitHub Exploit DB Packet Storm
310196 - linux
redhat 		linux_kernel
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_eus 		Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or pos… CWE-190
 Integer Overflow or Wraparound 		CVE-2010-4649 2024-11-21 10:21 2011-02-19 Show GitHub Exploit DB Packet Storm
310197 - moinejf
fedoraproject 		abcm2ps
fedora 		Multiple unspecified vulnerabilities in abcm2ps before 5.9.13 have unknown impact and attack vectors, a different issue than CVE-2010-3441. NVD-CWE-noinfo
CVE-2010-4744 2024-11-21 10:21 2011-02-19 Show GitHub Exploit DB Packet Storm
310198 - moinejf
fedoraproject 		abcm2ps
fedora 		Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than … CWE-787
 Out-of-bounds Write 		CVE-2010-4743 2024-11-21 10:21 2011-02-19 Show GitHub Exploit DB Packet Storm
310199 - moxa activex_sdk Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property valu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-4742 2024-11-21 10:21 2011-02-19 Show GitHub Exploit DB Packet Storm
310200 - moxa device_manager
mdm_tool 		Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-4741 2024-11-21 10:21 2011-02-19 Show GitHub Exploit DB Packet Storm