Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
41 5.3 警告
Network 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows Kerberos のサービス拒否の脆弱性 New CWE-125
境界外読み取り 		CVE-2026-42914 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
42 5.7 警告
Adjacent 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows TCP/IP のサービス拒否の脆弱性 New CWE-131
正しくないバッファサイズ計算 		CVE-2026-42915 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
43 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		NT OS カーネルの特権の昇格の脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-42916 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
44 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows テレフォニー サーバーの情報漏えいの脆弱性 New CWE-125
境界外読み取り 		CVE-2026-42968 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
45 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows プッシュ通知の情報漏えいの脆弱性 New CWE-908
初期化されていないリソースの使用 		CVE-2026-42969 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
46 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows プッシュ通知の情報漏えいの脆弱性 New CWE-200
情報漏えい 		CVE-2026-42970 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
47 5.5 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows プッシュ通知の情報漏えいの脆弱性 New CWE-200
情報漏えい 		CVE-2026-42971 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
48 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft … 		Windows プッシュ通知の特権昇格の脆弱性 New CWE-362
CWE-416
CVE-2026-42979 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
49 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		NT OS カーネルの特権の昇格の脆弱性 New CWE-122
CWE-191
CVE-2026-42980 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
50 8.1 重要
Network 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows パフォーマンス モニターのリモート コード実行に対する脆弱性 New CWE-191
整数アンダーフロー 		CVE-2026-42981 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310271 - hp insight_control_virtual_machine_management Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors. NVD-CWE-noinfo
CVE-2010-3988 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310272 - hp insight_control_virtual_machine_management Cross-site scripting (XSS) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-3987 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310273 - nitrosecurity nitroview_esm_software ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess. CWE-20
 Improper Input Validation  		CVE-2010-4099 2024-11-21 10:20 2010-10-28 Show GitHub Exploit DB Packet Storm
310274 - monotone monotone monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service (crash) via an empty argument to the mtn command. NVD-CWE-Other
CVE-2010-4098 2024-11-21 10:20 2010-10-28 Show GitHub Exploit DB Packet Storm
310275 - avatic aardvark_topsites_php Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3… CWE-79
Cross-site Scripting 		CVE-2010-4097 2024-11-21 10:20 2010-10-28 Show GitHub Exploit DB Packet Storm
310276 - monkeysphere_project monkeysphere share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command. CWE-94
Code Injection 		CVE-2010-4096 2024-11-21 10:20 2010-10-28 Show GitHub Exploit DB Packet Storm
310277 - robo-ftp robo-ftp Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via … CWE-22
Path Traversal 		CVE-2010-4095 2024-11-21 10:20 2010-10-27 Show GitHub Exploit DB Packet Storm
310278 - hp operations_orchestration Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified … CWE-79
Cross-site Scripting 		CVE-2010-3985 2024-11-21 10:20 2010-10-27 Show GitHub Exploit DB Packet Storm
310279 - ibm rational_test_lab_manager
rational_quality_manager 		The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by l… CWE-255
Credentials Management 		CVE-2010-4094 2024-11-21 10:20 2010-10-27 Show GitHub Exploit DB Packet Storm
310280 - hp virtual_connect_enterprise_manager Unspecified vulnerability in HP Virtual Connect Enterprise Manager (VCEM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors. NVD-CWE-noinfo
CVE-2010-3986 2024-11-21 10:20 2010-10-27 Show GitHub Exploit DB Packet Storm