Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2111 6.5 警告
Network
Synology Inc. SSL VPN Client Synology Inc.のSSL VPN Clientにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2021-47960 2026-06-3 17:04 2026-04-10 Show GitHub Exploit DB Packet Storm
2112 8.1 重要
Network
Synology Inc. SSL VPN Client Synology Inc.のSSL VPN Clientにおける認証情報の平文保存に関する脆弱性 CWE-256
平文でパスワードを保存
CVE-2021-47961 2026-06-3 17:04 2026-04-10 Show GitHub Exploit DB Packet Storm
2113 7.5 重要
Network
デル Dell Unisphere for PowerMax Virtual Appliance デルのDell Unisphere for PowerMax Virtual Applianceにおける認可に関する脆弱性 CWE-285
不適切な認可
CVE-2022-34363 2026-06-3 17:04 2026-05-22 Show GitHub Exploit DB Packet Storm
2114 7.8 重要
Local
Synology Inc. BeeDrive Synology Inc.のBeeDriveにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2023-52945 2026-06-3 17:04 2026-05-27 Show GitHub Exploit DB Packet Storm
2115 6.5 警告
Network
Apache Software Foundation Ignite Apache Software FoundationのIgniteにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル
CVE-2025-48977 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
2116 9.1 緊急
Network
Palo Alto Networks PAN-OS
Prisma Access
Palo Alto NetworksのPAN-OS等の複数製品における検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 CWE-565
検証および完全性チェックを行っていない Cookie への依存
CVE-2026-0257 2026-06-3 17:04 2026-05-13 Show GitHub Exploit DB Packet Storm
2117 8.3 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-10001 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
2118 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-10002 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
2119 6.5 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-10004 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
2120 7.5 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける競合状態に関する脆弱性 CWE-362
競合状態
CVE-2026-10006 2026-06-3 17:03 2026-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310741 - wellsfargo wells_fargo_mobile The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive info… CWE-310
Cryptographic Issues
CVE-2010-4214 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310742 - bankofamerica bank_of_america The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading applicat… CWE-310
Cryptographic Issues
CVE-2010-4213 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310743 - usaa usaa The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application da… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-4212 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310744 - ebay paypal The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal… CWE-287
Improper Authentication
CVE-2010-4211 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310745 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2010-4209 2024-11-21 10:20 2010-11-8 Show GitHub Exploit DB Packet Storm
310746 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2010-4208 2024-11-21 10:20 2010-11-8 Show GitHub Exploit DB Packet Storm
310747 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2010-4207 2024-11-21 10:20 2010-11-8 Show GitHub Exploit DB Packet Storm
310748 - adobe acrobat_reader
acrobat
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-4091 2024-11-21 10:20 2010-11-8 Show GitHub Exploit DB Packet Storm
310749 8.8 HIGH
Network
google
webkitgtk
fedoraproject
chrome
webkitgtk
fedora
Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, al… CWE-787
 Out-of-bounds Write
CVE-2010-4206 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310750 9.8 CRITICAL
Network
google chrome Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unkn… NVD-CWE-noinfo
CVE-2010-4205 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm