Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5271 9.1 緊急
Network 		マイクロソフト Azure SDK for Java Azure SDK for Java のセキュリティ機能のバイパスの脆弱性 CWE-287
CWE-347
CVE-2026-33117 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
5272 9.9 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Customer Insights Microsoft Dynamics 365 Customer Insights の特権昇格の脆弱性 CWE-269
不適切な権限管理 		CVE-2026-33821 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
5273 6.5 警告
Adjacent 		Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34960 2026-05-18 12:06 2026-05-11 Show GitHub Exploit DB Packet Storm
5274 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows テレフォニー サービスの特権昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-40382 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
5275 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-40397 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
5276 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows リモート デスクトップ サービスの特権昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-40398 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
5277 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows TCP/IP の特権昇格の脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-40399 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
5278 7.1 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows TCP/IP のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-40401 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
5279 9.3 緊急
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022 		Windows Hyper-V の特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-40402 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
5280 8.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows グラフィックス コンポーネントのリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-40403 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313521 3.3 LOW
Local 		hp
redhat
fedoraproject 		hp-ux_directory_server
redhat_directory_server
389_directory_server
directory_server 		389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2010-3282 2024-11-21 10:18 2020-01-10 Show GitHub Exploit DB Packet Storm
313522 5.5 MEDIUM
Local 		babiloo_project
debian 		babiloo
debian_linux 		babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files. CWE-494
 Download of Code Without Integrity Check 		CVE-2010-3440 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313523 8.8 HIGH
Network 		pixelpost pixelpost Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password. CWE-352
 Origin Validation Error 		CVE-2010-3305 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313524 6.5 MEDIUM
Network 		rubyonrails
debian 		rails
debian_linux 		The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks. CWE-311
Missing Encryption of Sensitive Data 		CVE-2010-3299 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313525 5.5 MEDIUM
Local 		mailscanner mailscanner The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature checking which could allow an attacker to… CWE-311
Missing Encryption of Sensitive Data 		CVE-2010-3292 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313526 4.7 MEDIUM
Local 		mailscanner mailscanner mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-… CWE-59
Link Following 		CVE-2010-3095 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313527 6.5 MEDIUM
Network 		cor-entertainment
debian
fedoraproject 		alien-arena
debian_linux
fedora 		It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command. CWE-20
 Improper Input Validation  		CVE-2010-3439 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313528 9.8 CRITICAL
Network 		libpoe-component-irc-perl_project
debian
fedoraproject 		libpoe-component-irc-perl
debian_linux
fedora 		libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as "some text\rQUIT" to the 'pri… CWE-134
Use of Externally-Controlled Format String 		CVE-2010-3438 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313529 4.8 MEDIUM
Local 		gargoyle_project
debian 		gargoyle
debian_linux 		If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a dire… CWE-20
 Improper Input Validation  		CVE-2010-3359 2024-11-21 10:18 2019-11-13 Show GitHub Exploit DB Packet Storm
313530 9.8 CRITICAL
Network 		qtparted_project qtparted qtparted has insecure library loading which may allow arbitrary code execution CWE-20
 Improper Input Validation  		CVE-2010-3375 2024-11-21 10:18 2019-10-30 Show GitHub Exploit DB Packet Storm