Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3471 6.1 警告
Network 		シーメンス teamcenter シーメンスのteamcenterにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-33862 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
3472 7.5 重要
Network 		シーメンス teamcenter シーメンスのteamcenterにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-33893 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
3473 5.3 警告
Network 		MediaWiki MediaWiki MediaWikiにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34093 2026-05-20 13:20 2026-05-11 Show GitHub Exploit DB Packet Storm
3474 3.8 低
Network 		MediaWiki MediaWiki MediaWikiにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-34094 2026-05-20 13:20 2026-05-11 Show GitHub Exploit DB Packet Storm
3475 8.1 重要
Network 		Apache Software Foundation Apache Flink Apache Software FoundationのApache Flinkにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-35194 2026-05-20 13:20 2026-05-15 Show GitHub Exploit DB Packet Storm
3476 4.3 警告
Network 		マイクロソフト Microsoft Edge Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-35429 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
3477 7.8 重要
Local 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-37525 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
3478 7.8 重要
Local 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-37526 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
3479 9.8 緊急
Network 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおける複数の脆弱性 CWE-22
CWE-367
CVE-2026-37531 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
3480 6.5 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40016 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311821 - phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtr… CWE-79
Cross-site Scripting 		CVE-2010-2958 2024-11-21 10:17 2010-09-9 Show GitHub Exploit DB Packet Storm
311822 - linux
opensuse
suse
canonical 		linux_kernel
opensuse
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_real_time_extension
ubuntu_linux 		The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users … CWE-193
 Off-by-one Error 		CVE-2010-2955 2024-11-21 10:17 2010-09-9 Show GitHub Exploit DB Packet Storm
311823 - linux
debian
suse
opensuse 		linux_kernel
debian_linux
linux_enterprise_desktop
opensuse
linux_enterprise_server
linux_enterprise_high_availability_extension
linux_enterprise_real_time 		The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.… CWE-200
Information Exposure 		CVE-2010-2803 2024-11-21 10:17 2010-09-9 Show GitHub Exploit DB Packet Storm
311824 7.8 HIGH
Local 		linux
vmware
canonical
debian
avaya
opensuse
suse 		linux_kernel
esx
ubuntu_linux
debian_linux
aura_system_manager
aura_communication_manager
voice_portal
aura_system_platform
aura_session_manager
aura_presence_services
i… 		The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local user… CWE-476
 NULL Pointer Dereference 		CVE-2010-2798 2024-11-21 10:17 2010-09-9 Show GitHub Exploit DB Packet Storm
311825 - adobe shockwave_player Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption. NOTE: due to conflicting i… CWE-399
 Resource Management Errors 		CVE-2010-2874 2024-11-21 10:17 2010-09-8 Show GitHub Exploit DB Packet Storm
311826 - microsoft windows_2003_server
windows_server_2008
windows_xp
windows_7
windows_vista
windows_server_2003 		Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cau… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2739 2024-11-21 10:17 2010-09-8 Show GitHub Exploit DB Packet Storm
311827 - mantisbt mantisbt Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related… CWE-79
Cross-site Scripting 		CVE-2010-2802 2024-11-21 10:17 2010-09-8 Show GitHub Exploit DB Packet Storm
311828 - linux
suse
opensuse
canonical 		linux_kernel
linux_enterprise_desktop
linux_enterprise_server
opensuse
ubuntu_linux 		The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a d… CWE-476
 NULL Pointer Dereference 		CVE-2010-2954 2024-11-21 10:17 2010-09-4 Show GitHub Exploit DB Packet Storm
311829 - hp hp-ux Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors. NVD-CWE-noinfo
CVE-2010-2712 2024-11-21 10:17 2010-08-31 Show GitHub Exploit DB Packet Storm
311830 - realnetworks realplayer Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors. NVD-CWE-noinfo
CVE-2010-3002 2024-11-21 10:17 2010-08-31 Show GitHub Exploit DB Packet Storm