Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5751	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71292	2026-05-15 10:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

5752	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-71293	2026-05-15 10:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

5753	5.5	警告 Local	サムスン	android	サムスンのAndroidにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2026-21015	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

5754	5.5	警告 Local	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-Other その他	CVE-2026-21016	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

5755	6.7	警告 Local	サムスン	android	サムスンのAndroidにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-21018	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

5756	7.8	重要 Local	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-Other その他	CVE-2026-21020	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

5757	6.8	警告 Physics	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21021	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

5758	5.5	警告 Local	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-Other その他	CVE-2026-21022	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

5759	6.1	警告 Network	ヒューレット・パッカード・エンタープライズ	HPE Aruba Networking AOS-CX	ヒューレット・パッカード・エンタープライズのHPE Aruba Networking AOS-CXにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-23817	2026-05-15 10:53	2026-03-11	Show	GitHub Exploit DB Packet Storm

5760	5.4	警告 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-28819	2026-05-15 10:53	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314631	-		synology	dsm	Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and p…	CWE-79 Cross-site Scripting	CVE-2010-2453	2024-11-21 10:16	2010-09-30	Show	GitHub Exploit DB Packet Storm

314632	-		roundup-tracker	roundup	Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program.	CWE-79 Cross-site Scripting	CVE-2010-2491	2024-11-21 10:16	2010-09-25	Show	GitHub Exploit DB Packet Storm

314633	-		microsoft	windows_xp windows_server_2003	The RPC client implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly allocate memory during the parsing of responses, which allows remote RPC servers and man-in-the…	CWE-94 Code Injection	CVE-2010-2567	2024-11-21 10:16	2010-09-16	Show	GitHub Exploit DB Packet Storm

314634	-		microsoft	windows_xp windows_server_2003	The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents, which allows remot…	CWE-94 Code Injection	CVE-2010-2563	2024-11-21 10:16	2010-09-16	Show	GitHub Exploit DB Packet Storm

314635	-		rim	blackberry_desktop_software	Untrusted search path vulnerability in BlackBerry Desktop Software before 6.0.0.47 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a…	NVD-CWE-Other	CVE-2010-2600	2024-11-21 10:16	2010-09-16	Show	GitHub Exploit DB Packet Storm

314636	-		mailenable	mailenable	The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in …	CWE-20 Improper Input Validation	CVE-2010-2580	2024-11-21 10:16	2010-09-16	Show	GitHub Exploit DB Packet Storm

314637	-		futomi	access_analyzer_cgi	Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspec…	CWE-79 Cross-site Scripting	CVE-2010-2366	2024-11-21 10:16	2010-09-14	Show	GitHub Exploit DB Packet Storm

314638	-		linux canonical suse	linux_kernel ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_high_availability_extension	The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows …	CWE-476 NULL Pointer Dereference	CVE-2010-2495	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

314639	7.8	HIGH Local	linux vmware avaya	linux_kernel esx aura_system_manager aura_communication_manager aura_system_platform aura_session_manager aura_presence_services iq aura_voice_portal	Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of s…	CWE-120 Classic Buffer Overflow	CVE-2010-2492	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

314640	7.8	HIGH Local	linux vmware canonical suse	linux_kernel esx ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop	The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the ci…	NVD-CWE-noinfo	CVE-2010-2524	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed