Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3291 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-42309 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
3292 5.5 警告
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-42310 2026-05-14 10:18 2026-05-9 Show GitHub Exploit DB Packet Storm
3293 8.1 重要
Network 		Grav CMS grav Grav CMSのgravにおける複数の脆弱性 CWE-269
CWE-285
CWE-639
CWE-837
CVE-2026-42609 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3294 6.5 警告
Network 		Grav CMS grav Grav CMSのgravにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-42610 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3295 8.9 重要
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42611 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3296 5.4 警告
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42612 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3297 4.8 警告
Network 		Grav CMS grav Grav CMSのgravにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42841 2026-05-14 10:18 2026-05-11 Show GitHub Exploit DB Packet Storm
3298 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-Other
その他 		CVE-2026-43004 2026-05-14 10:17 2026-05-1 Show GitHub Exploit DB Packet Storm
3299 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43005 2026-05-14 10:17 2026-05-1 Show GitHub Exploit DB Packet Storm
3300 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43006 2026-05-14 10:17 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346151 - mozilla firefox The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0165 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
346152 - mozilla firefox The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perfo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0166 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
346153 - mozilla firefox The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0168 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
346154 - mozilla firefox Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site s… CWE-79
Cross-site Scripting 		CVE-2010-0170 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
346155 - mozilla firefox toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorizat… NVD-CWE-Other
CVE-2010-0172 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
346156 - nos_microsystems
adobe 		getplus_download_manager
download_manager 		A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are … CWE-20
 Improper Input Validation  		CVE-2010-0189 2017-09-19 10:30 2010-02-24 Show GitHub Exploit DB Packet Storm
346157 - nos_microsystems
adobe 		getplus_download_manager
download_manager 		Per: http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html "Adobe is aware of the recently posted report of a remote code execution vulnerability in the Adobe Download Manager… CWE-20
 Improper Input Validation  		CVE-2010-0189 2017-09-19 10:30 2010-02-24 Show GitHub Exploit DB Packet Storm
346158 - wireshark wireshark Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0304 2017-09-19 10:30 2010-02-4 Show GitHub Exploit DB Packet Storm
346159 - kvm_qumranet kvm The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execu… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0306 2017-09-19 10:30 2010-02-13 Show GitHub Exploit DB Packet Storm
346160 - squid-cache squid lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a h… CWE-20
 Improper Input Validation  		CVE-2010-0308 2017-09-19 10:30 2010-02-4 Show GitHub Exploit DB Packet Storm