Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3241 7.8 重要
Local 		Uderzo Software SpaceSniffer Uderzo SoftwareのSpaceSnifferにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-26738 2026-05-25 10:25 2026-03-10 Show GitHub Exploit DB Packet Storm
3242 9.8 緊急
Network 		zlib zlib Ruby-lang.orgのZlibにおける複数の脆弱性 CWE-120
CWE-131
CVE-2026-27820 2026-05-25 10:25 2026-04-16 Show GitHub Exploit DB Packet Storm
3243 7.8 重要
Local 		Louis Pilfold Gleam Louis PilfoldのGleamにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-32146 2026-05-25 10:25 2026-04-11 Show GitHub Exploit DB Packet Storm
3244 4.3 警告
Network 		ERLANG Erlang/ssh
Erlang/OTP 		ERLANGのErlang/OTP等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-32147 2026-05-25 10:25 2026-04-21 Show GitHub Exploit DB Packet Storm
3245 7.8 重要
Local 		Elixir-ecto Postgrex Elixir-ectoのPostgrexにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-32687 2026-05-25 10:25 2026-05-12 Show GitHub Exploit DB Packet Storm
3246 7.5 重要
Network 		マイクロソフト go-ntlmssp マイクロソフトのgo-ntlmsspにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-32952 2026-05-25 10:25 2026-04-24 Show GitHub Exploit DB Packet Storm
3247 7.5 重要
Network 		Mtrudel Bandit MtrudelのBanditにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-39803 2026-05-25 10:25 2026-05-13 Show GitHub Exploit DB Packet Storm
3248 7.5 重要
Network 		Mtrudel Bandit MtrudelのBanditにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-39806 2026-05-25 10:25 2026-05-13 Show GitHub Exploit DB Packet Storm
3249 7.5 重要
Network 		Quarkiverse Hub Quarkus OpenAPI Generator Quarkiverse HubのQuarkus OpenAPI Generatorにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40180 2026-05-25 10:25 2026-04-10 Show GitHub Exploit DB Packet Storm
3250 8.8 重要
Network 		OWASP OWASP BLT OWASPのOWASP BLTにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-40316 2026-05-25 10:25 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311581 - mozilla firefox
seamonkey
thunderbird 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow r… NVD-CWE-noinfo
CVE-2010-3169 2024-11-21 10:18 2010-09-10 Show GitHub Exploit DB Packet Storm
311582 - mozilla firefox
seamonkey
thunderbird 		Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering X… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-3168 2024-11-21 10:18 2010-09-10 Show GitHub Exploit DB Packet Storm
311583 - mozilla firefox
seamonkey
thunderbird 		The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node remov… CWE-119
CWE-399
Incorrect Access of Indexable Resource ('Range Error') 
 Resource Management Errors 		CVE-2010-3167 2024-11-21 10:18 2010-09-10 Show GitHub Exploit DB Packet Storm
311584 - mozilla firefox
seamonkey
thunderbird 		Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey befo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-3166 2024-11-21 10:18 2010-09-10 Show GitHub Exploit DB Packet Storm
311585 - novell identity_manager The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file. CWE-255
Credentials Management 		CVE-2010-3264 2024-11-21 10:18 2010-09-9 Show GitHub Exploit DB Packet Storm
311586 - zope zope ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions. NVD-CWE-Other
CVE-2010-3198 2024-11-21 10:18 2010-09-9 Show GitHub Exploit DB Packet Storm
311587 - google
webkitgtk
apple
canonical 		chrome
webkitgtk
iphone_os
safari
ubuntu_linux 		WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS … CWE-200
Information Exposure 		CVE-2010-3259 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
311588 - google chrome The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors. CWE-502
 Deserialization of Untrusted Data 		CVE-2010-3258 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
311589 - google
webkitgtk
apple
canonical 		chrome
webkitgtk
iphone_os
safari
ubuntu_linux 		Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute ar… CWE-416
 Use After Free 		CVE-2010-3257 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm
311590 - google chrome Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors. NVD-CWE-noinfo
CVE-2010-3256 2024-11-21 10:18 2010-09-8 Show GitHub Exploit DB Packet Storm