Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3451 5.5 警告
Local
Peter Steinberger (steipete) Summarize Peter Steinberger (steipete)のSummarizeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-45246 2026-05-20 13:22 2026-05-18 Show GitHub Exploit DB Packet Storm
3452 9.8 緊急
Network
IBM IBM Total Storage Service Console (TSSC)
TS4500 IMC
IBMのIBM Total Storage Service Console (TSSC)等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-5935 2026-05-20 13:21 2026-04-23 Show GitHub Exploit DB Packet Storm
3453 5.3 警告
Local
tonyc Imager::File::GIF TONYC (Tony Cook)のImager::File::GIFにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-8454 2026-05-20 13:21 2026-05-15 Show GitHub Exploit DB Packet Storm
3454 5.3 警告
Local
OALDERS (Olaf Alders) WWW::Mechanize::Cached OALDERS (Olaf Alders)のWWW::Mechanize::Cachedにおける複数の脆弱性 CWE-502
CWE-732
CVE-2026-8612 2026-05-20 13:21 2026-05-15 Show GitHub Exploit DB Packet Storm
3455 8.2 重要
Network
gravitl netmaker Netmakerにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2026-38651 2026-05-20 13:21 2026-04-28 Show GitHub Exploit DB Packet Storm
3456 8.2 重要
Network
シスコシステムズ Intersight Device Connector シスコシステムズのIntersight Device Connectorにおける複数の脆弱性 CWE-306
CWE-862
CVE-2026-5944 2026-05-20 13:21 2026-04-28 Show GitHub Exploit DB Packet Storm
3457 6.5 警告
Network
Ruby-lang.org Net::IMAP Ruby-lang.orgのNet::IMAPにおける複数の脆弱性 CWE-1322
CWE-770
CVE-2026-42256 2026-05-20 13:21 2026-05-9 Show GitHub Exploit DB Packet Storm
3458 6.5 警告
Network
GUIMARD (Xavier Guimard) Apache::Session::Generate::SHA256 GUIMARD (Xavier Guimard)のApache::Session::Generate::SHA256における複数の脆弱性 CWE-338
CWE-340
CVE-2025-40931
CVE-2025-40932
CVE-2026-8503
2026-05-20 13:21 2026-05-15 Show GitHub Exploit DB Packet Storm
3459 6.5 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-2325 2026-05-20 13:21 2026-05-18 Show GitHub Exploit DB Packet Storm
3460 8.8 重要
Network
フォーティネット FortiNDR フォーティネットのFortiNDRにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-25088 2026-05-20 13:21 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311701 - redhat
t1lib
tug
evince
t1lib
tetex
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denia… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-2642 2024-11-21 10:17 2011-01-8 Show GitHub Exploit DB Packet Storm
311702 - redhat evince Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary … CWE-20
 Improper Input Validation 
CVE-2010-2641 2024-11-21 10:17 2011-01-8 Show GitHub Exploit DB Packet Storm
311703 - redhat evince Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary … CWE-20
 Improper Input Validation 
CVE-2010-2640 2024-11-21 10:17 2011-01-8 Show GitHub Exploit DB Packet Storm
311704 - ibm websphere_service_registry_and_repository IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API reque… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-2644 2024-11-21 10:17 2010-12-23 Show GitHub Exploit DB Packet Storm
311705 - microsoft windows_server_2008
windows_server_2003
windows_2003_server
The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL… NVD-CWE-Other
CVE-2010-2742 2024-11-21 10:17 2010-12-17 Show GitHub Exploit DB Packet Storm
311706 - realnetworks realplayer
realplayer_sp
Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute a… CWE-189
Numeric Errors
CVE-2010-2999 2024-11-21 10:17 2010-12-15 Show GitHub Exploit DB Packet Storm
311707 - realnetworks realplayer
realplayer_sp
Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.… CWE-399
 Resource Management Errors
CVE-2010-2997 2024-11-21 10:17 2010-12-15 Show GitHub Exploit DB Packet Storm
311708 - redhat enterprise_virtualization_manager
spice-activex
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and c… CWE-362
Race Condition
CVE-2010-2793 2024-11-21 10:17 2010-12-9 Show GitHub Exploit DB Packet Storm
311709 - linux linux_kernel The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FL… NVD-CWE-Other
CVE-2010-3066 2024-11-21 10:17 2010-12-7 Show GitHub Exploit DB Packet Storm
311710 - andy_armstrong cgi.pm
cgi-simple
The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which… CWE-94
Code Injection
CVE-2010-2761 2024-11-21 10:17 2010-12-7 Show GitHub Exploit DB Packet Storm