Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
61 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Windows ネットワーク コントローラー (NC) ホスト エージェントのサービス拒否の脆弱性 New CWE-416
CWE-822
CVE-2026-44805 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
62 7.8 重要
Local
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Windows 共通ログ ファイル システム ドライバーの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-44809 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
63 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Microsoft Cryptographic Services の特権の昇格の脆弱性 New CWE-287
不適切な認証
CVE-2026-44810 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
64 9.8 緊急
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
DHCP クライアント サービスのリモートでコードが実行される脆弱性 New CWE-121
スタックオーバーフロー
CVE-2026-44815 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
65 5.3 警告
Network
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 New CWE-400
CWE-770
CVE-2026-45031 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
66 6.5 警告
Adjacent
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-45160 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
67 8.8 重要
Local
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける複数の脆弱性 New CWE-20
CWE-787
CWE-787
CVE-2026-45328 2026-06-12 14:51 2026-06-10 Show GitHub Exploit DB Packet Storm
68 6.5 警告
Local
Espressif Systems ESP-IDF Espressif SystemsのESP-IDFにおける複数の脆弱性 New CWE-125
CWE-20
CWE-200
CVE-2026-45329 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
69 5.3 警告
Network
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 New CWE-125
CWE-193
CVE-2026-45358 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
70 5.7 警告
Local
ImageMagick ImageMagick ImageMagickにおける複数の脆弱性 New CWE-125
CWE-129
CVE-2026-45359 2026-06-12 14:50 2026-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310191 - ibm enovia Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet." NVD-CWE-noinfo
CVE-2010-4218 2024-11-21 10:20 2010-11-10 Show GitHub Exploit DB Packet Storm
310192 - ibm tivoli_directory_server Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a … CWE-399
 Resource Management Errors
CVE-2010-4217 2024-11-21 10:20 2010-11-10 Show GitHub Exploit DB Packet Storm
310193 - ibm tivoli_directory_server IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-4216 2024-11-21 10:20 2010-11-10 Show GitHub Exploit DB Packet Storm
310194 - wellsfargo wells_fargo_mobile The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive info… CWE-310
Cryptographic Issues
CVE-2010-4214 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310195 - bankofamerica bank_of_america The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading applicat… CWE-310
Cryptographic Issues
CVE-2010-4213 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310196 - usaa usaa The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application da… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-4212 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310197 - ebay paypal The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal… CWE-287
Improper Authentication
CVE-2010-4211 2024-11-21 10:20 2010-11-9 Show GitHub Exploit DB Packet Storm
310198 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2010-4209 2024-11-21 10:20 2010-11-8 Show GitHub Exploit DB Packet Storm
310199 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2010-4208 2024-11-21 10:20 2010-11-8 Show GitHub Exploit DB Packet Storm
310200 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2010-4207 2024-11-21 10:20 2010-11-8 Show GitHub Exploit DB Packet Storm