Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2421 7 重要
Local 		- アップルのmacOSにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2025-46284 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2422 5.5 警告
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-46307 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2423 7.5 重要
Network 		WSO2 WSO2 Universal Gateway
WSO2 API Control Plane
WSO2 API Manager
WSO2 Traffic Manager 		WSO2のWSO2 API Control Plane等の複数製品におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2025-8154 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
2424 8.8 重要
Network 		WSO2 WSO2 Universal Gateway
WSO2 API Control Plane
WSO2 API Manager
WSO2 Traffic Manager 		WSO2のWSO2 API Control Plane等の複数製品におけるパーミッションの不適切な保持に関する脆弱性 CWE-281
パーミッションの不適切な保持 		CVE-2025-8325 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
2425 7.2 重要
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおける複数の脆弱性 CWE-284
CWE-863
CVE-2025-9973 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
2426 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-1402 2026-05-29 11:18 2026-05-27 Show GitHub Exploit DB Packet Storm
2427 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-23292 2026-05-29 11:18 2026-03-25 Show GitHub Exploit DB Packet Storm
2428 9.8 緊急
Network 		マイクロソフト Microsoft Power Pages Microsoft Power Pages Remote Code Execution Vulnerability CWE-77
コマンドインジェクション 		CVE-2026-23652 2026-05-29 11:18 2026-05-22 Show GitHub Exploit DB Packet Storm
2429 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-2393 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
2430 4.7 警告
Local 		NVIDIA gpu display driver NVIDIAのgpu display driverにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-24199 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311191 - microsoft windows Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified… NVD-CWE-noinfo
CVE-2010-3888 2024-11-21 10:19 2010-10-9 Show GitHub Exploit DB Packet Storm
311192 - apple mail The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-3887 2024-11-21 10:19 2010-10-9 Show GitHub Exploit DB Packet Storm
311193 - microsoft internet_explorer The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript … CWE-200
Information Exposure 		CVE-2010-3886 2024-11-21 10:19 2010-10-9 Show GitHub Exploit DB Packet Storm
311194 - cmsmadesimple cms_made_simple Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative … CWE-352
 Origin Validation Error 		CVE-2010-3884 2024-11-21 10:19 2010-10-9 Show GitHub Exploit DB Packet Storm
311195 - cmsmadesimple cms_made_simple Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for… CWE-352
 Origin Validation Error 		CVE-2010-3883 2024-11-21 10:19 2010-10-9 Show GitHub Exploit DB Packet Storm
311196 - cmsmadesimple cms_made_simple Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global C… CWE-79
Cross-site Scripting 		CVE-2010-3882 2024-11-21 10:19 2010-10-9 Show GitHub Exploit DB Packet Storm
311197 - rene_tegel visual_synapse Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. CWE-22
Path Traversal 		CVE-2010-3743 2024-11-21 10:19 2010-10-9 Show GitHub Exploit DB Packet Storm
311198 - freeradius freeradius The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requ… CWE-399
 Resource Management Errors 		CVE-2010-3697 2024-11-21 10:19 2010-10-8 Show GitHub Exploit DB Packet Storm
311199 - freeradius freeradius The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause … CWE-399
 Resource Management Errors 		CVE-2010-3696 2024-11-21 10:19 2010-10-8 Show GitHub Exploit DB Packet Storm
311200 - apereo phpcas Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directo… CWE-22
Path Traversal 		CVE-2010-3692 2024-11-21 10:19 2010-10-8 Show GitHub Exploit DB Packet Storm