Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4061 9.1 緊急
Network 		axios project axios axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) 		CVE-2026-42264 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
4062 5.7 警告
Network 		Kimai project kimai Kimai projectのKimaiにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2026-42267 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
4063 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-42499 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
4064 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-42501 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
4065 9.1 緊急
Network 		Grav CMS grav Grav CMSのgravにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-42608 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
4066 5.4 警告
Network 		Open edX openedx Open edXのopenedxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42857 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
4067 9.9 緊急
Network 		Open edX openedx Open edXのopenedxにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42858 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
4068 7.5 重要
Network 		マイクロソフト Microsoft Outlook Microsoft Outlook for iOS の改ざんの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-42893 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
4069 7.5 重要
Network 		マイクロソフト .NET ASP.NET Core のサービス拒否の脆弱性 CWE-835
無限ループ 		CVE-2026-42899 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
4070 8.6 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-43139 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312541 7.8 HIGH
Local 		apple mac_os_x_server
mac_os_x 		Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges. CWE-20
 Improper Input Validation  		CVE-2010-1821 2024-11-21 10:15 2017-04-14 Show GitHub Exploit DB Packet Storm
312542 7.8 HIGH
Local 		apple mac_os_x_server
mac_os_x 		Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1816 2024-11-21 10:15 2017-04-14 Show GitHub Exploit DB Packet Storm
312543 - videolan vlc_media_player Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, al… CWE-189
Numeric Errors 		CVE-2010-2062 2024-11-21 10:15 2014-12-27 Show GitHub Exploit DB Packet Storm
312544 - apple quicktime Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attack… NVD-CWE-Other
CVE-2010-1819 2024-11-21 10:15 2013-12-27 Show GitHub Exploit DB Packet Storm
312545 - nicholasthompson global_redirect Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users t… CWE-20
 Improper Input Validation  		CVE-2010-2021 2024-11-21 10:15 2012-06-26 Show GitHub Exploit DB Packet Storm
312546 - apple airport_express_base_station_firmware
airport_extreme_base_station_firmware
airport_express
airport_extreme
time_capsule 		Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attack… NVD-CWE-noinfo
CVE-2010-1804 2024-11-21 10:15 2010-12-22 Show GitHub Exploit DB Packet Storm
312547 - apple mac_os_x
mac_os_x_server 		The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices, which allows local users to cause a denial of service (system crash) vi… CWE-399
 Resource Management Errors 		CVE-2010-1847 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm
312548 - apple mac_os_x
mac_os_x_server 		Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a craf… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1846 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm
312549 - apple mac_os_x
mac_os_x_server 		ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PSD im… CWE-20
 Improper Input Validation  		CVE-2010-1845 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm
312550 - apple mac_os_x
mac_os_x_server 		Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (memory consumption and system crash) via a crafted image. CWE-20
 Improper Input Validation  		CVE-2010-1844 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm