Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243581 5 警告 アップル
マイクロソフト
- Apple Safari で使用されている CFNetwork の cfnetwork.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0924 2012-06-26 16:19 2010-03-3 Show GitHub Exploit DB Packet Storm
243582 4.4 警告 GNU Project - emacs の movemail の lib-src/movemail.c における任意のメールボックスファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0825 2012-06-26 16:19 2010-04-5 Show GitHub Exploit DB Packet Storm
243583 7.5 危険 aleinbeen
Invision Power Services, Inc
- Invision Power Board の改訂版である (nv2) Awards の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0802 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243584 3.5 注意 Autartica
Joomla!
- Joomla! の autartitarot コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0801 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243585 7.5 危険 barnowl - BarnOwl におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0793 2012-06-26 16:19 2010-03-16 Show GitHub Exploit DB Packet Storm
243586 3.3 注意 FUSE - FUSE の fusermount における任意の共有 FUSE ファイルシステムをマウント解除される脆弱性 CWE-59
リンク解釈の問題
CVE-2010-0789 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243587 5 警告 fipsasp - fipsForum におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0765 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243588 7.5 危険 commodityrentals - CommodityRentals Vacation Rental Software の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0763 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243589 7.5 危険 commodityrentals - CommodityRentals CD Rental Software の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0762 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
243590 7.5 危険 commodityrentals - CommodityRentals Books/eBooks Rentals Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0761 2012-06-26 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
431 9.9 CRITICAL
Network
linuxfoundation cloudnativepg CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as t… Update CWE-250
CWE-271
CWE-426
 Execution with Unnecessary Privileges
 Privilege Dropping / Lowering Errors
 Untrusted Search Path
CVE-2026-44477 2026-06-4 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
432 8.0 HIGH
Network
microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. New CWE-78
OS Command 
CVE-2026-47294 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
433 6.3 MEDIUM
Network
vivotek fd8136_firmware A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST… New CWE-121
Stack-based Buffer Overflow
CVE-2026-35717 2026-06-4 03:42 2026-06-2 Show GitHub Exploit DB Packet Storm
434 7.3 HIGH
Network
vivotek fd8136_firmware Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component New CWE-121
Stack-based Buffer Overflow
CVE-2026-30649 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
435 8.8 HIGH
Network
vivotek fd8136_firmware A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-03… New CWE-120
Classic Buffer Overflow
CVE-2026-30650 2026-06-4 03:41 2026-06-3 Show GitHub Exploit DB Packet Storm
436 8.8 HIGH
Network
vivotek fd8136_firmware A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an … New CWE-120
Classic Buffer Overflow
CVE-2026-30652 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
437 6.3 MEDIUM
Network
vivotek fd8136_firmware A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized n1… New CWE-121
Stack-based Buffer Overflow
CVE-2026-35716 2026-06-4 03:40 2026-06-3 Show GitHub Exploit DB Packet Storm
438 6.5 MEDIUM
Network
vivotek fd8136_firmware A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted … New CWE-22
Path Traversal
CVE-2026-35718 2026-06-4 03:39 2026-06-3 Show GitHub Exploit DB Packet Storm
439 9.9 CRITICAL
Network
oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc… Update CWE-400
CWE-284
 Uncontrolled Resource Consumption
Improper Access Control
CVE-2026-46775 2026-06-4 03:35 2026-05-29 Show GitHub Exploit DB Packet Storm
440 9.6 CRITICAL
Network
jpettitt meshcore_card MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect … Update CWE-79
Cross-site Scripting
CVE-2026-45323 2026-06-4 03:34 2026-05-29 Show GitHub Exploit DB Packet Storm