Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5381	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28904	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5382	7.5	重要 Network	アップル	iOS iPadOS tvOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28905	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5383	7.5	重要 Network		-	アップルのmacOSにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28908	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5384	7.5	重要 Network	アップル	iOS iPadOS tvOS watchOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28913	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5385	7.8	重要 Local		-	アップルのmacOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-28919	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5386	8.8	重要 Local		-	アップルのmacOSにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2026-28923	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5387	7.5	重要 Network		-	アップルのmacOSにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-28924	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5388	7.5	重要 Network		-	アップルのmacOSにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-28925	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5389	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な比較ロジックの粒度に関する脆弱性	CWE-1254 不正な比較ロジックの粒度	CVE-2026-28929	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

5390	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28944	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313801	-		cisco	intelligent_contact_manager	Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-3040	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

313802	-		cisco	unified_communications_manager	/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via …	CWE-78 OS Command	CVE-2010-3039	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

313803	-		ibm	websphere_commerce	Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2010-2636	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

313804	-		ibm	websphere_commerce	SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admi…	CWE-89 SQL Injection	CVE-2010-2635	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

313805	9.8	CRITICAL Network	apple fedoraproject canonical debian opensuse suse redhat	cups mac_os_x_server mac_os_x fedora ubuntu_linux debian_linux opensuse linux_enterprise_server linux_enterprise enterprise_linux_server enterprise_linux enterprise_l…	ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-f…	CWE-416 Use After Free	CVE-2010-2941	2024-11-21 10:17	2010-11-6	Show	GitHub Exploit DB Packet Storm

313806	-		cisco	ciscoworks_common_services ciscoworks_lan_management_solution qos_policy_manager security_manager telepresence_readiness_assessment_manager unified_operations_manager unified_servic…	Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-3036	2024-11-21 10:17	2010-10-30	Show	GitHub Exploit DB Packet Storm

313807	-		tu-braunschweig	libsmi	Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical stri…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2891	2024-11-21 10:17	2010-10-28	Show	GitHub Exploit DB Packet Storm

313808	-		adobe	robohelp robohelp_server	Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-2886	2024-11-21 10:17	2010-10-27	Show	GitHub Exploit DB Packet Storm

313809	-		adobe	robohelp robohelp_server	Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generati…	CWE-79 Cross-site Scripting	CVE-2010-2885	2024-11-21 10:17	2010-10-27	Show	GitHub Exploit DB Packet Storm

313810	-		realnetworks	realplayer realplayer_sp	Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file…	CWE-20 Improper Input Validation	CVE-2010-2998	2024-11-21 10:17	2010-10-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed