Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2061 5.3 警告
Network 		Exim Development Exim Exim DevelopmentのEximにおける最小値チェックのない数値範囲の比較に関する脆弱性 CWE-839
最小値チェックのない数値範囲の比較 		CVE-2026-48840 2026-06-5 10:45 2026-05-30 Show GitHub Exploit DB Packet Storm
2062 8.1 重要
Network 		Project Jupyter Jupyter Server Project JupyterのJupyter Serverにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-5422 2026-06-5 10:45 2026-06-2 Show GitHub Exploit DB Packet Storm
2063 7.5 重要
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける入力の構文的正当性の検証に関する脆弱性 CWE-1286
入力の構文的正当性の不適切な検証 		CVE-2026-7307 2026-06-5 10:45 2026-05-19 Show GitHub Exploit DB Packet Storm
2064 8.1 重要
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-7504 2026-06-5 10:45 2026-05-19 Show GitHub Exploit DB Packet Storm
2065 7.5 重要
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-7507 2026-06-5 10:45 2026-05-19 Show GitHub Exploit DB Packet Storm
2066 7.1 重要
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-7571 2026-06-5 10:45 2026-05-19 Show GitHub Exploit DB Packet Storm
2067 5.4 警告
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける認証アルゴリズムの不適切な実装に関する脆弱性 CWE-303
認証アルゴリズム上の問題 		CVE-2026-8922 2026-06-5 10:45 2026-05-19 Show GitHub Exploit DB Packet Storm
2068 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-9308 2026-06-5 10:44 2026-06-1 Show GitHub Exploit DB Packet Storm
2069 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-9309 2026-06-5 10:44 2026-06-1 Show GitHub Exploit DB Packet Storm
2070 4.2 警告
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける入力の一貫性の検証に関する脆弱性 CWE-1288
入力の一貫性の不適切な検証 		CVE-2026-9689 2026-06-5 10:44 2026-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310471 - sun jre
jdk
sdk 		Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untr… NVD-CWE-noinfo
CVE-2010-4447 2024-11-21 10:20 2011-02-18 Show GitHub Exploit DB Packet Storm
310472 - sun jre
jdk 		Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and avail… NVD-CWE-noinfo
CVE-2010-4422 2024-11-21 10:20 2011-02-18 Show GitHub Exploit DB Packet Storm
310473 - novell edirectory Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to cause a denial of service (hang) via a malformed FileSetLock… NVD-CWE-noinfo
CVE-2010-4327 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm
310474 - mit kerberos_5 The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child proces… CWE-20
 Improper Input Validation  		CVE-2010-4022 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm
310475 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-4307 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm
310476 - adobe shockwave_player Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-4306 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm
310477 - adobe shockwave_player The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. CWE-20
 Improper Input Validation  		CVE-2010-4196 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm
310478 - adobe shockwave_player The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. CWE-20
 Improper Input Validation  		CVE-2010-4195 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm
310479 - adobe shockwave_player The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. CWE-20
 Improper Input Validation  		CVE-2010-4194 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm
310480 - adobe shockwave_player Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. CWE-20
 Improper Input Validation  		CVE-2010-4193 2024-11-21 10:20 2011-02-11 Show GitHub Exploit DB Packet Storm