Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3351 7.5 重要
Network 		マイクロソフト Copilot Chat (Microsoft Edge) Copilot Chat (Microsoft Edge) の情報漏えいの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-33111 2026-05-18 12:05 2026-05-7 Show GitHub Exploit DB Packet Storm
3352 8.1 重要
Network 		マイクロソフト Azure Monitor Action Group Notification System Azure Monitor のアクション グループの通知システムの特権昇格の脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41105 2026-05-18 12:05 2026-05-7 Show GitHub Exploit DB Packet Storm
3353 7.8 重要
Local 		マイクロソフト Kiota マイクロソフトのKiotaにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41134 2026-05-18 12:05 2026-04-22 Show GitHub Exploit DB Packet Storm
3354 8.2 重要
Network 		Kata Containers Confidential Containers
Kata Containers 		Kata ContainersのConfidential Containers等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-41326 2026-05-18 12:05 2026-04-24 Show GitHub Exploit DB Packet Storm
3355 8.4 重要
Local 		opentelemetry OpenTelemetry eBPF Instrumentation opentelemetryのOpenTelemetry eBPF Instrumentationにおける複数の脆弱性 CWE-22
CWE-59
CVE-2026-41433 2026-05-18 12:05 2026-04-24 Show GitHub Exploit DB Packet Storm
3356 5.3 警告
Network 		RedwoodSDK RedwoodSDK RedwoodjsのRedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-42190 2026-05-18 12:05 2026-05-8 Show GitHub Exploit DB Packet Storm
3357 7.2 重要
Network 		FileMaker, Inc Claris FileMaker Cloud Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker Cloudにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-43680 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
3358 7.2 重要
Network 		FileMaker, Inc Claris FileMaker Cloud Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker CloudにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-43685 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
3359 6.5 警告
Network 		Shellhub Shellhub Shellhubにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44426 2026-05-18 12:05 2026-05-13 Show GitHub Exploit DB Packet Storm
3360 9.8 緊急
Network 		Yarbo Lawn Mower Pro Firmware
Lawn Mower Firmware 		YarboのLawn Mower Firmware等の複数製品における非公開の機能に関する脆弱性 CWE-912
CWE-noinfo
CVE-2026-7413 2026-05-18 12:05 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312161 - debian dpkg Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a s… CWE-22
Path Traversal 		CVE-2010-1679 2024-11-21 10:14 2011-01-11 Show GitHub Exploit DB Packet Storm
312162 - mhonarc mhonarc MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> seque… CWE-399
 Resource Management Errors 		CVE-2010-1677 2024-11-21 10:14 2011-01-4 Show GitHub Exploit DB Packet Storm
312163 - tor tor Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecif… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1676 2024-11-21 10:14 2010-12-22 Show GitHub Exploit DB Packet Storm
312164 - apple quicktime Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Track Header (aka … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1508 2024-11-21 10:14 2010-12-10 Show GitHub Exploit DB Packet Storm
312165 3.7 LOW
Network 		mit kerberos_5 MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have un… CWE-310
Cryptographic Issues 		CVE-2010-1324 2024-11-21 10:14 2010-12-3 Show GitHub Exploit DB Packet Storm
312166 3.7 LOW
Network 		mit kerberos
kerberos_5 		MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visi… CWE-310
Cryptographic Issues 		CVE-2010-1323 2024-11-21 10:14 2010-12-3 Show GitHub Exploit DB Packet Storm
312167 9.8 CRITICAL
Network 		apple mac_os_x_server
mac_os_x 		OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a … CWE-295
Improper Certificate Validation  		CVE-2010-1378 2024-11-21 10:14 2010-11-16 Show GitHub Exploit DB Packet Storm
312168 - nullsoft winamp Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1523 2024-11-21 10:14 2010-11-6 Show GitHub Exploit DB Packet Storm
312169 - openfabrics enterprise_distribution openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file. CWE-59
Link Following 		CVE-2010-1693 2024-11-21 10:14 2010-10-27 Show GitHub Exploit DB Packet Storm
312170 - mit kerberos_5 The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, w… CWE-20
 Improper Input Validation  		CVE-2010-1322 2024-11-21 10:14 2010-10-8 Show GitHub Exploit DB Packet Storm