Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4131 7.5 重要
Network 		Netty Netty Nettyにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-42587 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
4132 9.8 緊急
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-42589 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4133 8.2 重要
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-42590 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4134 8.2 重要
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42591 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4135 5.3 警告
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける複数の脆弱性 CWE-367
CWE-918
CVE-2026-42592 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4136 5.3 警告
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける複数の脆弱性 CWE-22
CWE-73
CVE-2026-42593 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4137 7.5 重要
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-42594 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4138 8.6 重要
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42595 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4139 9.4 緊急
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42596 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
4140 5.9 警告
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける複数の脆弱性 CWE-73
CWE-918
CVE-2026-42597 2026-05-20 13:28 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312391 - opera opera_browser Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2455 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm
312392 - apple safari Apple Safari does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2454 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm
312393 - maradns maradns parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of… NVD-CWE-Other
CVE-2010-2444 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm
312394 - ponsoftware explzh Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not proper… CWE-120
Classic Buffer Overflow 		CVE-2010-2434 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm
312395 - libtiff libtiff The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with u… NVD-CWE-Other
CVE-2010-2443 2024-11-21 10:16 2010-06-25 Show GitHub Exploit DB Packet Storm
312396 - microsoft internet_explorer Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets." CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2442 2024-11-21 10:16 2010-06-25 Show GitHub Exploit DB Packet Storm
312397 - apple webkit WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and C… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2441 2024-11-21 10:16 2010-06-25 Show GitHub Exploit DB Packet Storm
312398 - upredsun subtitle_translation_wizard Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time ra… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2440 2024-11-21 10:16 2010-06-25 Show GitHub Exploit DB Packet Storm
312399 - moreforge moreamp Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list (.maf file). CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2439 2024-11-21 10:16 2010-06-25 Show GitHub Exploit DB Packet Storm
312400 - laubrotel g.cms_generator SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php. CWE-89
SQL Injection 		CVE-2010-2438 2024-11-21 10:16 2010-06-25 Show GitHub Exploit DB Packet Storm