Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3991	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-28991	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

3992	4.7	警告 Local	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-28992	2026-05-15 11:03	2026-05-11	Show	GitHub Exploit DB Packet Storm

3993	5.5	警告 Local	アップル	visionos iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28993	2026-05-15 11:03	2026-05-11	Show	GitHub Exploit DB Packet Storm

3994	5.3	警告 Adjacent	アップル	tvOS iOS iPadOS watchOS	アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-28994	2026-05-15 11:03	2026-05-11	Show	GitHub Exploit DB Packet Storm

3995	9.8	緊急 Network	Rocket.Chat	Rocket.Chat	Rocket.ChatにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-29198	2026-05-15 11:03	2026-04-23	Show	GitHub Exploit DB Packet Storm

3996	6.5	警告 Network	Textpattern	Textpattern CMS	TextpatternのTextpattern CMSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-30452	2026-05-15 11:03	2026-04-21	Show	GitHub Exploit DB Packet Storm

3997	9.1	緊急 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性	CWE-1188 リソースの安全ではないデフォルト値への初期化	CVE-2026-30805	2026-05-15 11:03	2026-05-12	Show	GitHub Exploit DB Packet Storm

3998	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-30807	2026-05-15 11:03	2026-05-12	Show	GitHub Exploit DB Packet Storm

3999	8.1	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるセッションの固定化の脆弱性	CWE-384 セッションの固定化	CVE-2026-30808	2026-05-15 11:03	2026-05-12	Show	GitHub Exploit DB Packet Storm

4000	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-30810	2026-05-15 11:03	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312601	-	apache	struts	The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which a…	NVD-CWE-Other	CVE-2010-1870	2024-11-21 10:15	2010-08-18	Show	GitHub Exploit DB Packet Storm

312602	-	microsoft	windows_xp windows_server_2008 windows_2003_server windows_7 windows_vista	Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a proc…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-1886	2024-11-21 10:15	2010-08-17	Show	GitHub Exploit DB Packet Storm

312603	-	apple	quicktime	Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-1799	2024-11-21 10:15	2010-08-17	Show	GitHub Exploit DB Packet Storm

312604	-	apple	iphone_os	Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-1797	2024-11-21 10:15	2010-08-17	Show	GitHub Exploit DB Packet Storm

312605	-	microsoft	word office_word_viewer	Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Wor…	CWE-94 Code Injection	CVE-2010-1903	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

312606	-	microsoft	word open_xml_file_format_converter office office_word_viewer office_compatibility_pack	Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-1902	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

312607	-	microsoft	word open_xml_file_format_converter office office_word_viewer office_compatibility_pack	Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Exc…	CWE-94 Code Injection	CVE-2010-1901	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

312608	-	microsoft	word open_xml_file_format_converter office office_word_viewer office_compatibility_pack works	Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, …	CWE-94 Code Injection	CVE-2010-1900	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

312609	-	microsoft	.net_framework silverlight	The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac …	CWE-94 Code Injection	CVE-2010-1898	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

312610	-	microsoft	windows_server_2008 windows_xp windows_7 windows_vista windows_server_2003 windows_2003_server	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not prop…	CWE-20 Improper Input Validation	CVE-2010-1897	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed