Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3881	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43374	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

3882	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-43375	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

3883	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43376	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

3884	8.1	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43377	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

3885	9.8	緊急 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける認証回避に関する脆弱性	CWE-592 認証回避の問題	CVE-2026-43512	2026-05-18 11:26	2026-05-12	Show	GitHub Exploit DB Packet Storm

3886	7.5	重要 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-43513	2026-05-18 11:25	2026-05-12	Show	GitHub Exploit DB Packet Storm

3887	9.1	緊急 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-43515	2026-05-18 11:25	2026-05-12	Show	GitHub Exploit DB Packet Storm

3888	7.5	重要 Network	Web Technologies	Change Detection	Web TechnologiesのChange Detectionにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-43891	2026-05-18 11:25	2026-05-12	Show	GitHub Exploit DB Packet Storm

3889	8.7	重要 Network	Daniel Garcia	Vaultwarden	Daniel GarciaのVaultwardenにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-43912	2026-05-18 11:25	2026-05-11	Show	GitHub Exploit DB Packet Storm

3890	9.1	緊急 Network	OPNsense project	OPNsense	OPNsenseにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-44193	2026-05-18 11:25	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312221	-	winny	winny	Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.	CWE-20 Improper Input Validation	CVE-2010-2361	2024-11-21 10:16	2010-08-26	Show	GitHub Exploit DB Packet Storm

312222	-	isamu_kaneko	winny	Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-2007.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2360	2024-11-21 10:16	2010-08-26	Show	GitHub Exploit DB Packet Storm

312223	-	cacti	cacti	Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary…	CWE-79 Cross-site Scripting	CVE-2010-2545	2024-11-21 10:16	2010-08-24	Show	GitHub Exploit DB Packet Storm

312224	-	cacti	cacti	Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote attackers to inject ar…	CWE-79 Cross-site Scripting	CVE-2010-2544	2024-11-21 10:16	2010-08-24	Show	GitHub Exploit DB Packet Storm

312225	-	cacti	cacti	Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graph_start parameter to graph.p…	CWE-79 Cross-site Scripting	CVE-2010-2543	2024-11-21 10:16	2010-08-24	Show	GitHub Exploit DB Packet Storm

312226	-	php debian	php debian_linux	The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attacke…	CWE-200 Information Exposure	CVE-2010-2531	2024-11-21 10:16	2010-08-21	Show	GitHub Exploit DB Packet Storm

312227	-	php	php	The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of …	CWE-200 Information Exposure	CVE-2010-2484	2024-11-21 10:16	2010-08-21	Show	GitHub Exploit DB Packet Storm

312228	-	apache	couchdb	Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation UR…	CWE-352 Origin Validation Error	CVE-2010-2234	2024-11-21 10:16	2010-08-20	Show	GitHub Exploit DB Packet Storm

312229	-	freetype canonical	freetype ubuntu_linux	Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a cra…	CWE-120 Classic Buffer Overflow	CVE-2010-2541	2024-11-21 10:16	2010-08-20	Show	GitHub Exploit DB Packet Storm

312230	-	freetype debian canonical	freetype debian_linux ubuntu_linux	Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.	CWE-120 Classic Buffer Overflow	CVE-2010-2527	2024-11-21 10:16	2010-08-20	Show	GitHub Exploit DB Packet Storm