Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2101 9.1 緊急
Network 		i18next i18next-http-backend i18nextのi18next-http-backendにおける複数の脆弱性 CWE-22
CWE-74
CVE-2026-41691 2026-06-3 17:04 2026-05-7 Show GitHub Exploit DB Packet Storm
2102 4.7 警告
Network 		i18next i18nextify i18nextのi18nextifyにおける複数の脆弱性 CWE-79
CWE-94
CVE-2026-41692 2026-06-3 17:04 2026-05-7 Show GitHub Exploit DB Packet Storm
2103 10 緊急
Network 		th30d4y OpenLearnX th30d4yのOpenLearnXにおける複数の脆弱性 CWE-250
CWE-284
CWE-693
CWE-78
CWE-94
CVE-2026-41900 2026-06-3 17:04 2026-05-8 Show GitHub Exploit DB Packet Storm
2104 6.1 警告
Network 		The Go Project Net The Go ProjectのNetにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-42502 2026-06-3 17:04 2026-05-22 Show GitHub Exploit DB Packet Storm
2105 6.1 警告
Network 		The Go Project Net The Go ProjectのNetにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42506 2026-06-3 17:04 2026-05-22 Show GitHub Exploit DB Packet Storm
2106 7.8 重要
Local 		horsicq Detect-It-Easy horsicqのDetect-It-Easyにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-43616 2026-06-3 17:04 2026-05-4 Show GitHub Exploit DB Packet Storm
2107 9.9 緊急
Network 		オラクル Oracle iAssets オラクルのOracle iAssetsにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46822 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
2108 7.5 重要
Network 		fastify fastify/accepts-serializer fastifyのfastify/accepts-serializerにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-7768 2026-06-3 17:04 2026-05-4 Show GitHub Exploit DB Packet Storm
2109 8.8 重要
Local 		NanoCo NanoClaw NanoCoのNanoClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-7875 2026-06-3 17:04 2026-05-6 Show GitHub Exploit DB Packet Storm
2110 6.5 警告
Network 		Synology Inc. SSL VPN Client Synology Inc.のSSL VPN Clientにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2021-47960 2026-06-3 17:04 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344501 - digium asterisk main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used i… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1224 2018-10-11 04:56 2010-04-2 Show GitHub Exploit DB Packet Storm
344502 - microsoft virtual_pc
virtual_server
windows_virtual_pc 		The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1225 2018-10-11 04:56 2010-04-2 Show GitHub Exploit DB Packet Storm
344503 - sun java_system_communications_express Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as de… CWE-79
Cross-site Scripting 		CVE-2010-1227 2018-10-11 04:56 2010-04-2 Show GitHub Exploit DB Packet Storm
344504 - bbsxp bbsxp Cross-site scripting (XSS) vulnerability in ShowPost.asp in BBSXP 2008 allows remote attackers to inject arbitrary web script or HTML via the ThreadID parameter. CWE-79
Cross-site Scripting 		CVE-2010-1275 2018-10-11 04:56 2010-04-7 Show GitHub Exploit DB Packet Storm
344505 - zabbix zabbix SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to api_… CWE-89
SQL Injection 		CVE-2010-1277 2018-10-11 04:56 2010-04-7 Show GitHub Exploit DB Packet Storm
344506 - adobe reader
acrobat 		Buffer overflow in the Atlcom.get_atlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1278 2018-10-11 04:56 2010-04-22 Show GitHub Exploit DB Packet Storm
344507 - imperva securesphere_web_application_firewall
securesphere_database_firewall 		Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appende… NVD-CWE-noinfo
CVE-2010-1329 2018-10-11 04:56 2010-04-16 Show GitHub Exploit DB Packet Storm
344508 - apple safari
webkit 		Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or caus… CWE-399
 Resource Management Errors 		CVE-2010-1392 2018-10-11 04:56 2010-06-12 Show GitHub Exploit DB Packet Storm
344509 - apple safari
webkit 		Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or caus… CWE-399
 Resource Management Errors 		CVE-2010-1397 2018-10-11 04:56 2010-06-12 Show GitHub Exploit DB Packet Storm
344510 - apple safari
webkit 		WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1398 2018-10-11 04:56 2010-06-12 Show GitHub Exploit DB Packet Storm