Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5781 7.5 重要
Network 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品におけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2025-46311 2026-05-14 10:23 2026-05-12 Show GitHub Exploit DB Packet Storm
5782 4.7 警告
Network 		ISPConfig ISPConfig ISPConfigにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-52206 2026-05-14 10:23 2026-05-5 Show GitHub Exploit DB Packet Storm
5783 7.3 重要
Network 		AstrBot AstrBot AstrBotにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2025-55449 2026-05-14 10:23 2026-05-8 Show GitHub Exploit DB Packet Storm
5784 7.2 重要
Network 		Check MK Check MK Check MKにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2025-64998 2026-05-14 10:22 2026-03-24 Show GitHub Exploit DB Packet Storm
5785 6.5 警告
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2025-66171 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
5786 8.1 重要
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2025-66172 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
5787 7.2 重要
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2025-67486 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
5788 9.1 緊急
Network 		Electric Sheep Fencing pfSense Electric Sheep FencingのpfSenseにおける複数の脆弱性 CWE-502
CWE-915
CVE-2025-69690 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
5789 9.9 緊急
Network 		Electric Sheep Fencing pfSense Electric Sheep FencingのpfSenseにおける複数の脆弱性 CWE-284
CWE-915
CVE-2025-69691 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
5790 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71271 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314471 - linux
suse
debian
canonical 		linux_kernel
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
debian_linux
ubuntu_linux 		The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write a… CWE-200
Information Exposure 		CVE-2010-2226 2024-11-21 10:16 2010-09-4 Show GitHub Exploit DB Packet Storm
314472 - common1 moobbs2 Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs2 before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-2365 2024-11-21 10:16 2010-09-1 Show GitHub Exploit DB Packet Storm
314473 - common1 moobbs Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-2364 2024-11-21 10:16 2010-09-1 Show GitHub Exploit DB Packet Storm
314474 - kde kde_sc Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remot… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2575 2024-11-21 10:16 2010-08-31 Show GitHub Exploit DB Packet Storm
314475 - iij seil\/x1_firmware
seil\/x2_firmware
seil\/b1_firmware 		The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, w… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2363 2024-11-21 10:16 2010-08-31 Show GitHub Exploit DB Packet Storm
314476 - winny winny Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks. CWE-20
 Improper Input Validation  		CVE-2010-2362 2024-11-21 10:16 2010-08-26 Show GitHub Exploit DB Packet Storm
314477 - winny winny Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks. CWE-20
 Improper Input Validation  		CVE-2010-2361 2024-11-21 10:16 2010-08-26 Show GitHub Exploit DB Packet Storm
314478 - isamu_kaneko winny Multiple buffer overflows in Winny 2.0b7.1 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-2007. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2360 2024-11-21 10:16 2010-08-26 Show GitHub Exploit DB Packet Storm
314479 - cacti cacti Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary… CWE-79
Cross-site Scripting 		CVE-2010-2545 2024-11-21 10:16 2010-08-24 Show GitHub Exploit DB Packet Storm
314480 - cacti cacti Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2010-2544 2024-11-21 10:16 2010-08-24 Show GitHub Exploit DB Packet Storm