Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3801 7.5 重要
Network
Getarcane Arcane GetarcaneのArcaneにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-42461 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
3802 8.1 重要
Network
FIT2CLOUD SQLBot FIT2CLOUDのSQLBotにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-42463 2026-05-18 11:30 2026-05-13 Show GitHub Exploit DB Packet Storm
3803 7.8 重要
Local
マイクロソフト Microsoft Office マイクロソフトのMicrosoft Officeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-42831 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3804 5.5 警告
Local
マイクロソフト Microsoft Word
Microsoft Office
Microsoft Excel
マイクロソフトのMicrosoft Excel等の複数製品におけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-42832 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3805 7.5 重要
Network
Espressif Systems ESP32 Arduino Espressif SystemsのESP32 Arduinoにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-42855 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3806 6.1 警告
Network
マイクロソフト Microsoft Exchange Server マイクロソフトのMicrosoft Exchange Serverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-42897 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3807 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-43286 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3808 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-43287 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3809 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用
CVE-2026-43288 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
3810 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-43289 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312191 - oracle database_server Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NVD-CWE-noinfo
CVE-2010-2391 2024-11-21 10:16 2010-10-14 Show GitHub Exploit DB Packet Storm
312192 - oracle database_server
fusion_middleware
enterprise_manager_grid_control
Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid … NVD-CWE-noinfo
CVE-2010-2390 2024-11-21 10:16 2010-10-14 Show GitHub Exploit DB Packet Storm
312193 - oracle database_server
fusion_middleware
Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to … NVD-CWE-noinfo
CVE-2010-2389 2024-11-21 10:16 2010-10-14 Show GitHub Exploit DB Packet Storm
312194 - oracle e-business_suite Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NVD-CWE-noinfo
CVE-2010-2388 2024-11-21 10:16 2010-10-14 Show GitHub Exploit DB Packet Storm
312195 - norenz ad-edit2 Cross-site scripting (XSS) vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2010-2367 2024-11-21 10:16 2010-10-7 Show GitHub Exploit DB Packet Storm
312196 - joomla joomla\! Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens. CWE-79
Cross-site Scripting
CVE-2010-2535 2024-11-21 10:16 2010-10-6 Show GitHub Exploit DB Packet Storm
312197 5.5 MEDIUM
Local
linux
canonical
suse
linux_kernel
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_high_availability_extension
Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a BTRFS_IOC_CLONE_RANGE ioctl call. CWE-200
Information Exposure
CVE-2010-2538 2024-11-21 10:16 2010-10-1 Show GitHub Exploit DB Packet Storm
312198 7.1 HIGH
Local
linux
canonical
suse
linux_kernel
ubuntu_linux
suse_linux_enterprise_server
suse_linux_enterprise_desktop
linux_enterprise_high_availability_extension
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl c… NVD-CWE-noinfo
CVE-2010-2537 2024-11-21 10:16 2010-10-1 Show GitHub Exploit DB Packet Storm
312199 - netbsd
freebsd
apple
netbsd
freebsd
mac_os_x
Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via… CWE-189
Numeric Errors
CVE-2010-2530 2024-11-21 10:16 2010-09-30 Show GitHub Exploit DB Packet Storm
312200 - linux
canonical
suse
linux_kernel
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_server
Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspe… CWE-190
 Integer Overflow or Wraparound
CVE-2010-2478 2024-11-21 10:16 2010-09-30 Show GitHub Exploit DB Packet Storm