Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2931 4.3 警告
Network 		HCL Technologies Limited HCL iControl HCL Technologies LimitedのHCL iControlにおけるHTTPS セッション内の Secure 属性がない重要な Cookie に関する脆弱性 CWE-614
HTTPS セッション内の Secure 属性がない重要な Cookie 		CVE-2025-52608 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
2932 5.3 警告
Network 		HCL Technologies Limited HCL iControl HCL Technologies LimitedのHCL iControlにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2025-52609 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
2933 4.3 警告
Network 		HCL Technologies Limited HCL iControl HCL Technologies LimitedのHCL iControlにおけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2025-52611 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
2934 8.8 重要
Network 		HCL Technologies Limited HCL iControl HCL Technologies LimitedのHCL iControlにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2025-52612 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
2935 7.5 重要
Network 		Open JS Foundation Node Version Manager (NVM) Open JS FoundationのNode Version Manager (NVM)におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-10796 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
2936 7.8 重要
Local 		NVIDIA transformers4rec NVIDIAのtransformers4recにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-24162 2026-06-8 11:49 2026-05-26 Show GitHub Exploit DB Packet Storm
2937 7.8 重要
Local 		NVIDIA NVTabular NVIDIAのNVTabularにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-24221 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
2938 7.8 重要
Local 		NVIDIA NVTabular NVIDIAのNVTabularにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-24237 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
2939 6.8 警告
Network 		SWUpdate SWUpdate SWUpdateにおける複数の脆弱性 CWE-125
CWE-191
CVE-2026-28525 2026-06-8 11:49 2026-04-23 Show GitHub Exploit DB Packet Storm
2940 7.5 重要
Network 		turbo-stream
Shopify		 React Router
Turbo Stream 		Shopify等の複数ベンダの製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-34077 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344571 - lexmark z2420 Per: http://support.lexmark.com/index?page=content&id=TE85&locale=EN&userlocale=EN_US#Printcryption 'Details Lexmark products have connection flood protection mechanisms that limit the number o… NVD-CWE-Other
CVE-2010-0618 2018-10-11 04:53 2010-03-25 Show GitHub Exploit DB Packet Storm
344572 - lexmark x94x Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0619 2018-10-11 04:53 2010-03-25 Show GitHub Exploit DB Packet Storm
344573 - emc homebase_server Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and conseq… CWE-22
Path Traversal 		CVE-2010-0620 2018-10-11 04:53 2010-02-25 Show GitHub Exploit DB Packet Storm
344574 - emc homebase_server Per: http://seclists.org/bugtraq/2010/Feb/222 Affected products: EMC HomeBase Server version 6.2.x EMC HomeBase Server version 6.3.x CWE-22
Path Traversal 		CVE-2010-0620 2018-10-11 04:53 2010-02-25 Show GitHub Exploit DB Packet Storm
344575 - gnu cpio
tar 		Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0624 2018-10-11 04:53 2010-03-15 Show GitHub Exploit DB Packet Storm
344576 - novell netware_ftp_server
netware 		Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0625 2018-10-11 04:53 2010-04-6 Show GitHub Exploit DB Packet Storm
344577 - ca ehealth_performance_manager Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2010-0640 2018-10-11 04:53 2010-02-25 Show GitHub Exploit DB Packet Storm
344578 - michalin kr_media_pogodny_cms SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action. CWE-89
SQL Injection 		CVE-2010-0671 2018-10-11 04:53 2010-02-23 Show GitHub Exploit DB Packet Storm
344579 - apache activemq Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination pa… CWE-79
Cross-site Scripting 		CVE-2010-0684 2018-10-11 04:53 2010-04-6 Show GitHub Exploit DB Packet Storm
344580 - digium asterisk The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern … NVD-CWE-Other
CVE-2010-0685 2018-10-11 04:53 2010-02-24 Show GitHub Exploit DB Packet Storm