Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 10:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2591 9.8 緊急
Network
Python Software Foundation Python Python Software FoundationのPythonにおける複数の脆弱性 CWE-20
CWE-434
CWE-74
CVE-2025-13462 2026-06-8 12:27 2026-03-12 Show GitHub Exploit DB Packet Storm
2592 6.1 警告
Network
Forcepoint LLC. Forcepoint Web Security Forcepoint LLC.のForcepoint Web Securityにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-2274 2026-06-8 12:27 2026-03-16 Show GitHub Exploit DB Packet Storm
2593 6.4 警告
Local
レッドハット Red Hat Fuse レッドハットのRed Hat Fuseにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2025-57849 2026-06-8 12:27 2026-03-13 Show GitHub Exploit DB Packet Storm
2594 9.8 緊急
Network
HCL Technologies Limited unica
HCL Unica Audience Central
HCL Technologies Limitedのunica等の複数製品におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2025-62319 2026-06-8 12:27 2026-03-16 Show GitHub Exploit DB Packet Storm
2595 6.4 警告
Local
レッドハット Red Hat OpenShift Data Foundation レッドハットのRed Hat OpenShift Data Foundationにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2025-8766 2026-06-8 12:27 2026-03-13 Show GitHub Exploit DB Packet Storm
2596 8.8 重要
Network
Amazon.com, Inc. Kiro IDE Amazon.com, Inc.のKiro IDEにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-10591 2026-06-8 12:27 2026-06-2 Show GitHub Exploit DB Packet Storm
2597 4.3 警告
Network
MISP MISP MISPにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-10854 2026-06-8 12:27 2026-06-4 Show GitHub Exploit DB Packet Storm
2598 8.8 重要
Network
D-Link Systems, Inc. DWR-M920 ファームウェア D-Link CorporationのDWR-M920 ファームウェアにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-10878 2026-06-8 12:27 2026-06-5 Show GitHub Exploit DB Packet Storm
2599 9.6 緊急
Network
Google Google Chrome GoogleのGoogle Chromeにおける複数の脆弱性 CWE-125
CWE-787
CVE-2026-10881 2026-06-8 12:27 2026-06-4 Show GitHub Exploit DB Packet Storm
2600 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-10882 2026-06-8 12:27 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310761 - banshee-project banshee The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse share… NVD-CWE-Other
CVE-2010-3998 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310762 - adobe shockwave_player Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to execute arbitrary code via a crafted web si… CWE-399
 Resource Management Errors
CVE-2010-4092 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310763 - onlinetechtools.com oasys_professional SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password para… CWE-89
SQL Injection
CVE-2010-4186 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310764 - energine energine SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie. CWE-89
SQL Injection
CVE-2010-4185 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310765 - netsupportsoftware netsupport_manager NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information… CWE-310
Cryptographic Issues
CVE-2010-4184 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310766 - htmlpurifier htmlpurifier Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) back… CWE-79
Cross-site Scripting
CVE-2010-4183 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310767 - gnucash gnucash gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current wor… NVD-CWE-Other
CVE-2010-3999 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310768 - cstr festival festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gai… NVD-CWE-Other
CVE-2010-3996 2024-11-21 10:20 2010-11-6 Show GitHub Exploit DB Packet Storm
310769 - microsoft windows_xp
windows_7
windows_vista
windows_server_2003
Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Busine… NVD-CWE-Other
CVE-2010-4182 2024-11-21 10:20 2010-11-5 Show GitHub Exploit DB Packet Storm
310770 - yaws yaws Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences. CWE-22
Path Traversal
CVE-2010-4181 2024-11-21 10:20 2010-11-5 Show GitHub Exploit DB Packet Storm