Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2431 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-2393 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
2432 4.7 警告
Local 		NVIDIA gpu display driver NVIDIAのgpu display driverにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-24199 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2433 9.8 緊急
Network 		NVIDIA Isaac Launchable NVIDIAのIsaac Launchableにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-24212 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2434 6.1 警告
Network 		Joomla! Joomla! Joomla!におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-25900 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2435 6.1 警告
Network 		Joomla! Joomla! Joomla!におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-25901 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2436 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-2601 2026-05-29 11:18 2026-05-27 Show GitHub Exploit DB Packet Storm
2437 7.5 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-2614 2026-05-29 11:17 2026-05-11 Show GitHub Exploit DB Packet Storm
2438 7.7 重要
Network 		マイクロソフト Azure Stack HCI Azure Stack HCI の情報漏えいの脆弱性 CWE-20
不適切な入力確認 		CVE-2026-26147 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
2439 8.8 重要
Network 		NervesHub NervesHub NervesHubにおける複数の脆弱性 CWE-285
CWE-668
CVE-2026-28806 2026-05-29 11:17 2026-03-10 Show GitHub Exploit DB Packet Storm
2440 7.5 重要
Network 		Gleam-wisp Wisp Gleam-wispのWispにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-28807 2026-05-29 11:17 2026-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311111 - mozilla bugzilla The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive inf… CWE-200
Information Exposure 		CVE-2010-3764 2024-11-21 10:19 2010-11-6 Show GitHub Exploit DB Packet Storm
311112 - libguestfs libguestfs libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files … CWE-200
Information Exposure 		CVE-2010-3851 2024-11-21 10:19 2010-11-5 Show GitHub Exploit DB Packet Storm
311113 - isc dhcp ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a … NVD-CWE-Other
CVE-2010-3611 2024-11-21 10:19 2010-11-5 Show GitHub Exploit DB Packet Storm
311114 - vim gvim Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary co… NVD-CWE-Other
CVE-2010-3914 2024-11-21 10:19 2010-11-3 Show GitHub Exploit DB Packet Storm
311115 - acegisecurity
vmware
ibm 		acegi-security
springsource_spring_security
websphere_application_server 		VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attacke… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-3700 2024-11-21 10:19 2010-10-30 Show GitHub Exploit DB Packet Storm
311116 - adobe shockwave_player Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-3655 2024-11-21 10:19 2010-10-30 Show GitHub Exploit DB Packet Storm
311117 - adobe
macromedia 		flash_player
acrobat
acrobat_reader 		Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-3654 2024-11-21 10:19 2010-10-30 Show GitHub Exploit DB Packet Storm
311118 - rubyonrails rails Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs. CWE-20
 Improper Input Validation  		CVE-2010-3933 2024-11-21 10:19 2010-10-28 Show GitHub Exploit DB Packet Storm
311119 - curl curl Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backs… CWE-22
Path Traversal 		CVE-2010-3842 2024-11-21 10:19 2010-10-28 Show GitHub Exploit DB Packet Storm
311120 - usebb usebb rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended acce… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-3713 2024-11-21 10:19 2010-10-28 Show GitHub Exploit DB Packet Storm