Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
260951 4 警告 ヒューレット・パッカード - HP HP-UX の NFS/ONCplus にあるインストールプロセスにおけるファイルシステムのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0451 2010-04-9 16:21 2010-03-25 Show GitHub Exploit DB Packet Storm
260952 7.5 危険 GNU Project
サイバートラスト株式会社
レッドハット
- GnuTLS の gnutls_x509_crt_get_serial 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0731 2010-04-9 16:21 2010-03-25 Show GitHub Exploit DB Packet Storm
260953 4.3 警告 シスコシステムズ - Cisco Router and Security Device Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0594 2010-04-8 15:03 2010-04-8 Show GitHub Exploit DB Packet Storm
260954 4.3 警告 MODX - MODx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1427 2010-04-8 15:02 2010-04-8 Show GitHub Exploit DB Packet Storm
260955 7.5 危険 MODX - MODx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1426 2010-04-8 15:02 2010-04-8 Show GitHub Exploit DB Packet Storm
260956 7.8 危険 シスコシステムズ - Cisco IOS および Cisco ルータにおける IKE パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題
CVE-2010-0578 2010-04-8 10:42 2010-03-24 Show GitHub Exploit DB Packet Storm
260957 7.8 危険 シスコシステムズ - Cisco IOS における SCCP パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0584 2010-04-8 10:42 2010-03-24 Show GitHub Exploit DB Packet Storm
260958 7.8 危険 シスコシステムズ - Cisco IOS における LDP パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0576 2010-04-8 10:42 2010-03-24 Show GitHub Exploit DB Packet Storm
260959 7.8 危険 シスコシステムズ - Cisco IOS の H.323 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0583 2010-04-8 10:42 2010-03-24 Show GitHub Exploit DB Packet Storm
260960 7.8 危険 シスコシステムズ - Cisco IOS における H.323 パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0582 2010-04-8 10:41 2010-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2291 7.5 HIGH
Network
- - AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens, Authorize.Net webhooks, and Bitcoin tran… CWE-862
 Missing Authorization
CVE-2026-56341 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2292 3.1 LOW
Network
- - Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act as SQL wildcards. Atta… CWE-20
 Improper Input Validation 
CVE-2026-56325 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2293 4.3 MEDIUM
Network
- - Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allows authenticated attackers to cause duplicate-page l… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2026-56307 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2294 6.3 MEDIUM
Network
- - Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-expiring API keys to bypass the require_apikey_expiration organization policy. The… CWE-285
Improper Authorization
CVE-2026-56295 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2295 - - - Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoint that returns full user objects including PII to unauthenticated attackers. An… CWE-200
Information Exposure
CVE-2026-56267 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2296 6.1 MEDIUM
Local
- - Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create malicious symlinks … CWE-59
Link Following
CVE-2026-56236 2026-06-23 04:17 2026-06-21 Show GitHub Exploit DB Packet Storm
2297 8.8 HIGH
Network
- - Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functions/v1/apikey endpoint that allows app-limited API keys to mint unrestricted keys by setting empty limits. Attackers… CWE-269
 Improper Privilege Management
CVE-2026-56216 2026-06-23 04:17 2026-06-20 Show GitHub Exploit DB Packet Storm
2298 7.5 HIGH
Network
- - Capgo before 12.128.2 contains an information disclosure vulnerability in Supabase PostgREST RPC endpoints is_trial_org and is_paying_org that allows unauthenticated attackers to enumerate organizati… CWE-200
Information Exposure
CVE-2026-56214 2026-06-23 04:17 2026-06-20 Show GitHub Exploit DB Packet Storm
2299 7.1 HIGH
Network
- - A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setti… CWE-125
Out-of-bounds Read
CVE-2026-56210 2026-06-23 04:17 2026-06-20 Show GitHub Exploit DB Packet Storm
2300 9.1 CRITICAL
Network
- - Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim's email address before that email is verified. By enabling two-fac… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-56081 2026-06-23 04:17 2026-06-20 Show GitHub Exploit DB Packet Storm