Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1931	6.1	警告 Network	Carnegie Mellon University (Project Cyrus)	cveClient	Carnegie Mellon University (Project Cyrus)のcveClientにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-35466	2026-06-5 10:51	2026-04-2	Show	GitHub Exploit DB Packet Storm

1932	7.5	重要 Network	Carnegie Mellon University (Project Cyrus)	cveClient	Carnegie Mellon University (Project Cyrus)のcveClientにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-35467	2026-06-5 10:51	2026-04-2	Show	GitHub Exploit DB Packet Storm

1933	7.5	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-37226	2026-06-5 10:51	2026-06-1	Show	GitHub Exploit DB Packet Storm

1934	7.5	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-37228	2026-06-5 10:51	2026-06-1	Show	GitHub Exploit DB Packet Storm

1935	7.5	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-37229	2026-06-5 10:51	2026-06-1	Show	GitHub Exploit DB Packet Storm

1936	7.5	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-37230	2026-06-5 10:51	2026-06-1	Show	GitHub Exploit DB Packet Storm

1937	7.5	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-37231	2026-06-5 10:51	2026-06-1	Show	GitHub Exploit DB Packet Storm

1938	7.5	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-37233	2026-06-5 10:51	2026-06-1	Show	GitHub Exploit DB Packet Storm

1939	7.5	重要 Network	Mosaic5G	Flexric	Mosaic5GのFlexricにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-37235	2026-06-5 10:51	2026-06-1	Show	GitHub Exploit DB Packet Storm

1940	4.9	警告 Network	MacGregor	Interschalt VDR G4e Firmware	MacGregorのInterschalt VDR G4e Firmwareにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-40425	2026-06-5 10:51	2026-05-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310391	-		google debian	chrome_os chrome debian_linux	Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers to cause a denial of service or possibly have unspecified othe…	NVD-CWE-noinfo	CVE-2010-4578	2024-11-21 10:21	2010-12-22	Show	GitHub Exploit DB Packet Storm

310392	7.5	HIGH Network	webkitgtk google fedoraproject debian	webkitgtk chrome_os chrome fedora debian_linux	The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products …	CWE-125 CWE-843 Out-of-bounds Read Type Confusion	CVE-2010-4577	2024-11-21 10:21	2010-12-22	Show	GitHub Exploit DB Packet Storm

310393	-		google	chrome_os chrome	browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers t…	CWE-476 NULL Pointer Dereference	CVE-2010-4576	2024-11-21 10:21	2010-12-22	Show	GitHub Exploit DB Packet Storm

310394	-		google	chrome_os chrome	The ThemeInstalledInfoBarDelegate::Observe function in browser/extensions/theme_installed_infobar_delegate.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly ha…	CWE-20 Improper Input Validation	CVE-2010-4575	2024-11-21 10:21	2010-12-22	Show	GitHub Exploit DB Packet Storm

310395	-		google	chrome chrome_os	The Pickle::Pickle function in base/pickle.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 on 64-bit Linux platforms does not properly perform pointer arithmetic, which allows…	CWE-502 Deserialization of Untrusted Data	CVE-2010-4574	2024-11-21 10:21	2010-12-22	Show	GitHub Exploit DB Packet Storm

310396	-		phpmyfaq	phpmyfaq	phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which all…	CWE-94 Code Injection	CVE-2010-4558	2024-11-21 10:21	2010-12-18	Show	GitHub Exploit DB Packet Storm

310397	-		invensys	wonderware_inbatch foxboro_i\/a_series_batch	Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a deni…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-4557	2024-11-21 10:21	2010-12-18	Show	GitHub Exploit DB Packet Storm

310398	-		sap	netweaver_business_client	Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTh…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-4556	2024-11-21 10:21	2010-12-18	Show	GitHub Exploit DB Packet Storm

310399	-		tibco	activematrix_bpm activematrix_service_grid activematrix_service_bus silver_cap_service activematrix_businessworks_service_engine silver_bpm_service	Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Servic…	NVD-CWE-noinfo	CVE-2010-4495	2024-11-21 10:21	2010-12-18	Show	GitHub Exploit DB Packet Storm

310400	-		phpmyadmin	phpmyadmin	phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.	CWE-287 Improper Authentication	CVE-2010-4481	2024-11-21 10:21	2010-12-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed