Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243531 5 警告 ASP indir - LookMer Music Portal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1116 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243532 5 警告 comscripts - Web Server Creator - Web Portal の news/include/customize.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1115 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243533 7.5 危険 comscripts - Web Server Creator - Web Portal における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1114 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243534 4.3 警告 comscripts - Web Server Creator - Web Portal の forum ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1113 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243535 4.3 警告 easysitenetwork - Jokes Complete Website におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1111 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243536 5 警告 djayp - phpMySport の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1110 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243537 6.8 警告 djayp - phpMySport の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1109 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243538 3.5 注意 Drupal
Four Kitchens		 - Drupal の Recent Comments モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1107 2012-06-26 16:19 2010-01-20 Show GitHub Exploit DB Packet Storm
243539 7.5 危険 advertisementmanager - AdvertisementManager の cgi/index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1106 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
243540 4.3 警告 advertisementmanager - AdvertisementManager の cgi/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1105 2012-06-26 16:19 2010-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 6.5 MEDIUM
Network 		vmware spring_cloud_function OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring C… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-40990 2026-06-5 22:47 2026-06-2 Show GitHub Exploit DB Packet Storm
582 7.3 HIGH
Local 		aiohttp aiohttp AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may allow arbitrary code execution. Most appli… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-34993 2026-06-5 22:44 2026-06-3 Show GitHub Exploit DB Packet Storm
583 7.5 HIGH
Network 		aiohttp aiohttp AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, cookies set with the `cookies` parameter on requests are sent after following a cross-origin r… New CWE-346
 Origin Validation Error 		CVE-2026-47265 2026-06-5 22:39 2026-06-3 Show GitHub Exploit DB Packet Storm
584 7.8 HIGH
Local 		- - A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-50256 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
585 7.8 HIGH
Local 		- - A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attack… New CWE-416
 Use After Free 		CVE-2026-50257 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
586 7.8 HIGH
Local 		- - A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify o… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-50258 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
587 7.8 HIGH
Local 		- - A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function Ch… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-50259 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
588 7.8 HIGH
Local 		- - A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroy… New CWE-416
 Use After Free 		CVE-2026-50260 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
589 7.8 HIGH
Local 		- - A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via … New CWE-416
 Use After Free 		CVE-2026-50261 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm
590 5.5 MEDIUM
Local 		- - An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number of bytes, exceeding … New CWE-125
Out-of-bounds Read 		CVE-2026-50262 2026-06-5 22:27 2026-06-5 Show GitHub Exploit DB Packet Storm