Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258871 9.3 危険 Mozilla Foundation - Mozilla Firefox の imgContainer::InternalAddFrameHelper 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0164 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
258872 4.3 警告 Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0171 2010-04-5 14:54 2010-03-23 Show GitHub Exploit DB Packet Storm
258873 4.3 警告 Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0170 2010-04-5 14:53 2010-03-23 Show GitHub Exploit DB Packet Storm
258874 7.5 危険 Heartlogic - HL-SiteManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1331 2010-04-2 15:02 2010-04-2 Show GitHub Exploit DB Packet Storm
258875 9.3 危険 Mozilla Foundation - Mozilla Firefox の Web Open Fonts Format デコーダ における整数オーバーフローの脆弱性 CWE-noinfo
情報不足 		CVE-2010-1028 2010-04-2 14:05 2010-03-19 Show GitHub Exploit DB Packet Storm
258876 5 警告 富士通
アクセラテクノロジ		 - Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性 CWE-200
情報漏えい 		- 2010-04-2 14:05 2010-03-10 Show GitHub Exploit DB Packet Storm
258877 1.9 注意 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3556 2010-04-2 14:02 2010-01-19 Show GitHub Exploit DB Packet Storm
258878 10 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2009-4538 2010-04-2 14:02 2010-01-12 Show GitHub Exploit DB Packet Storm
258879 6.6 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3939 2010-04-2 14:00 2009-11-16 Show GitHub Exploit DB Packet Storm
258880 6.6 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3889 2010-04-2 14:00 2009-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
731 7.5 HIGH
Network 		- - Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.5(4180) was discovered to contain a stack overflow in the domain parameter of the fromNetToolGet function. This vulnerability allows… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-36783 2026-06-11 05:16 2026-06-10 Show GitHub Exploit DB Packet Storm
732 9.8 CRITICAL
Network 		- - An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code … New CWE-120
Classic Buffer Overflow 		CVE-2026-30141 2026-06-11 05:16 2026-06-10 Show GitHub Exploit DB Packet Storm
733 6.5 MEDIUM
Network 		- - An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) … New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-36724 2026-06-11 05:15 2026-06-10 Show GitHub Exploit DB Packet Storm
734 6.1 MEDIUM
Network 		- - A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafte… New CWE-79
Cross-site Scripting 		CVE-2026-36725 2026-06-11 05:15 2026-06-10 Show GitHub Exploit DB Packet Storm
735 5.4 MEDIUM
Network 		- - A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted pa… New CWE-79
Cross-site Scripting 		CVE-2026-36728 2026-06-11 05:15 2026-06-10 Show GitHub Exploit DB Packet Storm
736 - - - A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-6444 2026-06-11 05:13 2026-06-10 Show GitHub Exploit DB Packet Storm
737 - - - A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges. New CWE-939
 Improper Authorization in Handler for Custom URL Scheme 		CVE-2026-6445 2026-06-11 05:13 2026-06-10 Show GitHub Exploit DB Packet Storm
738 - - - CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an… New CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-11626 2026-06-11 05:13 2026-06-11 Show GitHub Exploit DB Packet Storm
739 7.8 HIGH
Local 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Update CWE-843
Type Confusion 		CVE-2026-45600 2026-06-11 05:03 2026-06-10 Show GitHub Exploit DB Packet Storm
740 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w… 		Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. Update CWE-501
 Trust Boundary Violation 		CVE-2026-33828 2026-06-11 05:00 2026-06-10 Show GitHub Exploit DB Packet Storm