Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2561 5.5 警告
Local 		Grzegorz Kostka (gkostka) Lwext4 Grzegorz Kostka (gkostka)のLwext4におけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2025-70100 2026-06-8 12:29 2026-06-3 Show GitHub Exploit DB Packet Storm
2562 6.5 警告
Network 		Grzegorz Kostka (gkostka) Lwext4 Grzegorz Kostka (gkostka)のLwext4における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2025-70101 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2563 7.5 重要
Network 		NAVTOR AS NavBox Firmware NAVTOR ASのNavBox Firmwareにおける絶対パストラバーサルに関する脆弱性 CWE-36
絶対パストラバーサル 		CVE-2026-2753 2026-06-8 12:28 2026-03-6 Show GitHub Exploit DB Packet Storm
2564 7.5 重要
Network 		NAVTOR AS NavBox Firmware NAVTOR ASのNavBox Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-2754 2026-06-8 12:28 2026-03-6 Show GitHub Exploit DB Packet Storm
2565 6.5 警告
Network 		Project Calico Calico tigeraのCalicoにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-41184 2026-06-8 12:28 2026-05-28 Show GitHub Exploit DB Packet Storm
2566 6.5 警告
Network 		Project Calico Calico tigeraのCalicoにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-41185 2026-06-8 12:28 2026-05-28 Show GitHub Exploit DB Packet Storm
2567 5.5 警告
Local 		Canonical Livepatch Client CanonicalのLivepatch Clientにおける複数の脆弱性 CWE-306
CWE-732
CVE-2026-6369 2026-06-8 12:28 2026-04-20 Show GitHub Exploit DB Packet Storm
2568 7.8 重要
Local 		Synology Inc. Hyper Backup Explorer Synology Inc.のHyper Backup Explorerにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2022-49042 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2569 5.9 警告
Network 		Synology Inc. Note Station Client Synology Inc.のNote Station Clientにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2023-52951 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2570 4.1 警告
Network 		Synology Inc. Hyper Backup Synology Inc.のHyper Backupにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-47263 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310621 - dracut_project
udev_project 		dracut
udev 		plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from … CWE-276
Incorrect Default Permissions  		CVE-2010-4176 2024-11-21 10:20 2010-12-8 Show GitHub Exploit DB Packet Storm
310622 - systemtap systemtap The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary ker… CWE-20
 Improper Input Validation  		CVE-2010-4171 2024-11-21 10:20 2010-12-8 Show GitHub Exploit DB Packet Storm
310623 - systemtap systemtap The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment va… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-4170 2024-11-21 10:20 2010-12-8 Show GitHub Exploit DB Packet Storm
310624 - php php Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory … CWE-399
 Resource Management Errors 		CVE-2010-4150 2024-11-21 10:20 2010-12-8 Show GitHub Exploit DB Packet Storm
310625 - bsdperimeter pfsense Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkg_edit.php, … CWE-79
Cross-site Scripting 		CVE-2010-4412 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310626 - pulsecms pulse_cms Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter… CWE-22
Path Traversal 		CVE-2010-4330 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310627 - clamav clamav Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly … CWE-189
Numeric Errors 		CVE-2010-4261 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310628 - clamav clamav Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a cra… NVD-CWE-noinfo
CVE-2010-4260 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310629 - alexej_kryukov fontforge Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a B… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-4259 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm
310630 - wordpress wordpress SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackba… CWE-89
SQL Injection 		CVE-2010-4257 2024-11-21 10:20 2010-12-7 Show GitHub Exploit DB Packet Storm