Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1951	7.8	重要 Local	GitHub	GitHub Copilot CLI	GitHubのGitHub Copilot CLIにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-29783	2026-05-20 13:22	2026-03-6	Show	GitHub Exploit DB Packet Storm

1952	10	緊急 Network	DHTMLX	PDF Export Module	DHTMLXのPDF Export ModuleにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-41553	2026-05-20 13:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

1953	8.8	重要 Network	huggingface	Diffusers	huggingfaceのDiffusersにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-44513	2026-05-20 13:22	2026-05-14	Show	GitHub Exploit DB Packet Storm

1954	8.8	重要 Network	huggingface	Diffusers	huggingfaceのDiffusersにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-44827	2026-05-20 13:22	2026-05-14	Show	GitHub Exploit DB Packet Storm

1955	7.1	重要 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-45242	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1956	6.1	警告 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-45243	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1957	5.4	警告 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-45244	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1958	7.4	重要 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける複数の脆弱性	CWE-918 CWE-940	CVE-2026-45245	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1959	5.5	警告 Local	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-45246	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1960	9.8	緊急 Network	IBM	IBM Total Storage Service Console (TSSC) TS4500 IMC	IBMのIBM Total Storage Service Console (TSSC)等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-5935	2026-05-20 13:21	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345001	-	apple	mac_os_x mac_os_x_server	QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with Sorens…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-0518	2017-09-19 10:30	2010-03-31	Show	GitHub Exploit DB Packet Storm

345002	-	apple	quicktime	Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.	CWE-189 Numeric Errors	CVE-2010-0527	2017-09-19 10:30	2010-04-1	Show	GitHub Exploit DB Packet Storm

345003	-	apple	quicktime	Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html 'This issue does not affect Mac OS X systems'	CWE-189 Numeric Errors	CVE-2010-0527	2017-09-19 10:30	2010-04-1	Show	GitHub Exploit DB Packet Storm

345004	-	apple	itunes	Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file.	CWE-399 Resource Management Errors	CVE-2010-0531	2017-09-19 10:30	2010-04-1	Show	GitHub Exploit DB Packet Storm

345005	-	apple	itunes	Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse.	CWE-362 Race Condition	CVE-2010-0532	2017-09-19 10:30	2010-04-1	Show	GitHub Exploit DB Packet Storm

345006	-	apple	itunes	Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html 'This issue does not affect Mac OS X systems.'	CWE-362 Race Condition	CVE-2010-0532	2017-09-19 10:30	2010-04-1	Show	GitHub Exploit DB Packet Storm

345007	-	apple	quicktime	Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-0536	2017-09-19 10:30	2010-04-1	Show	GitHub Exploit DB Packet Storm

345008	-	apple	quicktime	Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html ' This issue does not affect Mac OS X systems.'	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-0536	2017-09-19 10:30	2010-04-1	Show	GitHub Exploit DB Packet Storm

345009	-	apple	safari webkit	Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary w…	CWE-79 Cross-site Scripting	CVE-2010-0544	2017-09-19 10:30	2010-06-12	Show	GitHub Exploit DB Packet Storm

345010	-	cisco	ios	Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of …	NVD-CWE-noinfo	CVE-2010-0586	2017-09-19 10:30	2010-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed