Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
61 7.5 重要
Network
アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web
アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-34713 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
62 5 警告
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける二重解放に関する脆弱性 New CWE-415
二重解放
CVE-2026-35188 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
63 5.4 警告
Network
VMware VMware Telco Cloud Platform
VMware Aria Operations
VMware Cloud Foundation
VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-41724 2026-06-16 13:38 2026-06-8 Show GitHub Exploit DB Packet Storm
64 5.3 警告
Network
VMware Spring Framework VMwareのSpring FrameworkにおけるHTTP リクエストスマグリングに関する脆弱性 New CWE-444
HTTP リクエストスマグリング
CVE-2026-41853 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
65 6.5 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-41854 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
66 7.5 重要
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-42764 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
67 7.5 重要
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-42765 2026-06-16 13:38 2026-06-9 Show GitHub Exploit DB Packet Storm
68 5.9 警告
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-42766 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
69 5.3 警告
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける証明書検証に関する脆弱性 New CWE-295
不正な証明書検証
CVE-2026-42769 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
70 7.5 重要
Network
マイクロソフト Microsoft Windows 10 1607
Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft …
リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 New CWE-362
CWE-416
CWE-787
CVE-2026-42909 2026-06-16 13:37 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310181 - realnetworks realplayer
realplayer_sp
Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-4376 2024-11-21 10:20 2010-12-15 Show GitHub Exploit DB Packet Storm
310182 - realnetworks realplayer Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remo… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-4375 2024-11-21 10:20 2010-12-15 Show GitHub Exploit DB Packet Storm
310183 - linux
fedoraproject
suse
opensuse
linux_kernel
fedora
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
linux_enterprise_real_time_extension
Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or poss… CWE-190
 Integer Overflow or Wraparound
CVE-2010-4157 2024-11-21 10:20 2010-12-11 Show GitHub Exploit DB Packet Storm
310184 - apple quicktime Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file. CWE-189
Numeric Errors
CVE-2010-4009 2024-11-21 10:20 2010-12-10 Show GitHub Exploit DB Packet Storm
310185 - apple iphone_os Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pre… CWE-362
Race Condition
CVE-2010-4012 2024-11-21 10:20 2010-12-9 Show GitHub Exploit DB Packet Storm
310186 - hp palm_webos Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file. CWE-79
Cross-site Scripting
CVE-2010-4109 2024-11-21 10:20 2010-12-9 Show GitHub Exploit DB Packet Storm
310187 - hp hp-ux HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated users to cause a denial of service via unspecified vectors. NVD-CWE-Other
CVE-2010-4108 2024-11-21 10:20 2010-12-9 Show GitHub Exploit DB Packet Storm
310188 - redhat enterprise_mrg The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-4179 2024-11-21 10:20 2010-12-8 Show GitHub Exploit DB Packet Storm
310189 - dracut_project
udev_project
dracut
udev
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from … CWE-276
Incorrect Default Permissions 
CVE-2010-4176 2024-11-21 10:20 2010-12-8 Show GitHub Exploit DB Packet Storm
310190 - systemtap systemtap The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary ker… CWE-20
 Improper Input Validation 
CVE-2010-4171 2024-11-21 10:20 2010-12-8 Show GitHub Exploit DB Packet Storm