Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4131 10 緊急
Network 		Peerigon angular-expressions Peerigonのangular-expressionsにおけるEval インジェクションに関する脆弱性 CWE-95
Evalインジェクション 		CVE-2026-44643 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4132 7.7 重要
Network 		Grav CMS grav Grav CMSのgravにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44738 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4133 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-44777 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4134 4.2 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44991 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4135 5 警告
Local 		OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避 		CVE-2026-44992 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4136 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-44993 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4137 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44994 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4138 7.3 重要
Local 		OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-44995 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4139 3.7 低
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-44996 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4140 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定 		CVE-2026-44997 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312591 5.5 MEDIUM
Local 		linux
vmware
canonical
suse 		linux_kernel
esx
ubuntu_linux
suse_linux_enterprise_server
suse_linux_enterprise_desktop
linux_enterprise_high_availability_extension 		The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as … NVD-CWE-noinfo
CVE-2010-2066 2024-11-21 10:15 2010-09-9 Show GitHub Exploit DB Packet Storm
312592 - apple quicktime The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribut… CWE-824
 Access of Uninitialized Pointer 		CVE-2010-1818 2024-11-21 10:15 2010-09-1 Show GitHub Exploit DB Packet Storm
312593 - apple apple_type_services
mac_os_x
mac_os_x_server 		Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1808 2024-11-21 10:15 2010-08-26 Show GitHub Exploit DB Packet Storm
312594 - apple libsecurity
mac_os_x
mac_os_x_server 		libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a… CWE-287
Improper Authentication 		CVE-2010-1802 2024-11-21 10:15 2010-08-26 Show GitHub Exploit DB Packet Storm
312595 - apple coregraphics
mac_os_x
mac_os_x_server 		Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF fil… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1801 2024-11-21 10:15 2010-08-26 Show GitHub Exploit DB Packet Storm
312596 - apple cfnetwork
mac_os_x
mac_os_x_server 		CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafte… CWE-200
Information Exposure 		CVE-2010-1800 2024-11-21 10:15 2010-08-26 Show GitHub Exploit DB Packet Storm
312597 - apple itunes Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in… NVD-CWE-Other
CVE-2010-1795 2024-11-21 10:15 2010-08-21 Show GitHub Exploit DB Packet Storm
312598 - apple itunes Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod to… NVD-CWE-noinfo
CVE-2010-1768 2024-11-21 10:15 2010-08-21 Show GitHub Exploit DB Packet Storm
312599 - apple webkit loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has u… CWE-255
Credentials Management 		CVE-2010-1760 2024-11-21 10:15 2010-08-20 Show GitHub Exploit DB Packet Storm
312600 9.8 CRITICAL
Network 		apache cxf Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not … CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2010-2076 2024-11-21 10:15 2010-08-20 Show GitHub Exploit DB Packet Storm