Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Microsoft Graphics コンポーネントの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-42986 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
212 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microso… 		Windows 展開サービス (WDS) のリモート コード実行 CWE-416
解放済みメモリの使用 		CVE-2026-42987 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
213 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Winlogon の特権の昇格の脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-42989 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
214 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft … 		Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-42991 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
215 6.5 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43951 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
216 5.5 警告
Local 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-44119 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
217 7.3 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-44185 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
218 7.3 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-44186 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
219 9.8 緊急
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファアンダーフローの脆弱性 CWE-124
バッファアンダーフロー 		CVE-2026-44631 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
220 5.5 警告
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022 		Windows ネットワーク コントローラー (NC) ホスト エージェントのサービス拒否の脆弱性 CWE-416
CWE-822
CVE-2026-44805 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310101 - openssl
fedoraproject
debian
canonical
suse
opensuse
f5 		openssl
fedora
debian_linux
ubuntu_linux
linux_enterprise_desktop
opensuse
linux_enterprise_server
linux_enterprise
nginx 		OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows r… NVD-CWE-noinfo
CVE-2010-4180 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310102 - andy_armstrong cgi.pm Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists… NVD-CWE-noinfo
CVE-2010-4411 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310103 - andy_armstrong cgi.pm
cgi-simple 		CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct H… CWE-94
Code Injection 		CVE-2010-4410 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310104 - vmware movie_decoder
workstation
player
server 		The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 a… CWE-94
Code Injection 		CVE-2010-4294 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310105 - php php Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an… CWE-189
Numeric Errors 		CVE-2010-4409 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310106 - apache archiva Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which mak… CWE-79
Cross-site Scripting 		CVE-2010-4408 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310107 - mono
novell 		mono
moonlight 		Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possi… CWE-20
 Improper Input Validation  		CVE-2010-4254 2024-11-21 10:20 2010-12-6 Show GitHub Exploit DB Packet Storm
310108 - alberto_pittoni alguest Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlGuest 1.1c-patched allow remote attackers to inject arbitrary web script or HTML via the (1) nome (nickname), (2) messaggio (mess… CWE-79
Cross-site Scripting 		CVE-2010-4407 2024-11-21 10:20 2010-12-6 Show GitHub Exploit DB Packet Storm
310109 - brunetton littlephpgallery Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled, allows remote attackers to list, include, and execute arbitrary local files vi… CWE-22
Path Traversal 		CVE-2010-4406 2024-11-21 10:20 2010-12-6 Show GitHub Exploit DB Packet Storm
310110 - anything-digital sh404sef Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-4405 2024-11-21 10:20 2010-12-6 Show GitHub Exploit DB Packet Storm