Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3071	9.8	緊急 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33519	2026-05-20 13:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

3072	5.3	警告 Adjacent	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるリソースの挿入に関する脆弱性	CWE-99 リソースの挿入	CVE-2026-33603	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3073	6.1	警告 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33862	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3074	7.5	重要 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-33893	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3075	5.3	警告 Network	MediaWiki	MediaWiki	MediaWikiにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-34093	2026-05-20 13:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

3076	3.8	低 Network	MediaWiki	MediaWiki	MediaWikiにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-34094	2026-05-20 13:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

3077	8.1	重要 Network	Apache Software Foundation	Apache Flink	Apache Software FoundationのApache Flinkにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-35194	2026-05-20 13:20	2026-05-15	Show	GitHub Exploit DB Packet Storm

3078	4.3	警告 Network	マイクロソフト	Microsoft Edge	Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-35429	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3079	7.8	重要 Local	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-37525	2026-05-20 13:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

3080	7.8	重要 Local	Linux Foundation	Automotive Grade Linux	Linux FoundationのAutomotive Grade Linuxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-37526	2026-05-20 13:20	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311911	-	ibm	websphere_application_server	The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses…	NVD-CWE-Other	CVE-2010-2328	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311912	-	ibm	websphere_application_server	mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP requ…	CWE-20 Improper Input Validation	CVE-2010-2327	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311913	-	ibm	websphere_application_server	IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace a…	CWE-200 Information Exposure	CVE-2010-2326	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311914	-	ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2010-2325	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311915	-	ibm	websphere_application_server	IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors.	NVD-CWE-noinfo	CVE-2010-2324	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311916	-	ibm	websphere_application_server	IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creatio…	CWE-200 Information Exposure	CVE-2010-2323	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311917	-	matthias_klose	fastjar	Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .…	CWE-22 Path Traversal	CVE-2010-2322	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311918	-	adobe	indesign_cs3	Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2321	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311919	-	vincent_fourmond	pmount	The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/.	CWE-59 Link Following	CVE-2010-2192	2024-11-21 10:16	2010-06-19	Show	GitHub Exploit DB Packet Storm

311920	-	idevspot	textads	SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter.	CWE-89 SQL Injection	CVE-2010-2319	2024-11-21 10:16	2010-06-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed