Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240091 9.3 危険 The PHP Group - PHP の COM 関数における制限を回避される脆弱性 CWE-78
CWE-DesignError
CVE-2007-5653 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
240092 7.8 危険 IBM - IBM DB2 UDB におけるメモリ破損を誘発する脆弱性 CWE-119
バッファエラー 		CVE-2007-5652 2012-09-25 16:59 2007-10-10 Show GitHub Exploit DB Packet Storm
240093 6.8 警告 Simple Machines
MySQL AB		 - SMF の Sources/Search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5646 2012-09-25 16:59 2007-09-23 Show GitHub Exploit DB Packet Storm
240094 7.5 危険 lussumo - Lussumo Vanilla における不正のソート操作などを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5644 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
240095 7.5 危険 lussumo - Lussumo Vanilla における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5643 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
240096 7.1 危険 Nortel Networks - IP Phone シリーズの Nortel 製品における呼び出しをブロックされる脆弱性 CWE-noinfo
情報不足 		CVE-2007-5640 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
240097 7.1 危険 Nortel Networks - Nortel UNIStim IP Softphone 2050 などにおけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-5639 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
240098 4.3 警告 Nortel Networks - IP Phone シリーズの Nortel 製品における RUDP ID を推測される脆弱性 CWE-200
CWE-310
CVE-2007-5638 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
240099 4.3 警告 Nortel Networks - IP Phone シリーズの Nortel 製品における物理的に盗聴される脆弱性 CWE-200
情報漏えい 		CVE-2007-5637 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
240100 7.5 危険 Nortel Networks - Nortel UNIStim IP Softphone 2050 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5636 2012-09-25 16:59 2007-10-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2621 7.1 HIGH
Network 		- - A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject A… CWE-295
Improper Certificate Validation  		CVE-2026-42012 2026-06-3 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2622 6.5 MEDIUM
Network 		apache flink_kubernetes_operator Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so th… CWE-552
CWE-918
 Files or Directories Accessible to External Parties
Server-Side Request Forgery (SSRF)  		CVE-2026-40564 2026-06-3 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2623 - - - Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages … CWE-22
Path Traversal 		CVE-2026-32685 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2624 4.3 MEDIUM
Network 		- - NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in version 2.2.4 in the id parameter of the endpoint `/index.php?route=/queri… CWE-79
Cross-site Scripting 		CVE-2026-32250 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2625 7.8 HIGH
Local 		google android In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges… CWE-125
Out-of-bounds Read 		CVE-2026-0076 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2626 7.5 HIGH
Network 		- - A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesyste… CWE-476
 NULL Pointer Dereference 		CVE-2025-70099 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2627 6.6 MEDIUM
Network 		jenkins ldap Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-48917 2026-06-3 01:14 2026-05-28 Show GitHub Exploit DB Packet Storm
2628 6.6 MEDIUM
Network 		jenkins ldap Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-48916 2026-06-3 01:13 2026-05-28 Show GitHub Exploit DB Packet Storm
2629 5.6 MEDIUM
Local 		synology assistant An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation. CWE-346
 Origin Validation Error 		CVE-2025-66593 2026-06-3 01:09 2026-05-27 Show GitHub Exploit DB Packet Storm
2630 5.6 MEDIUM
Local 		synology active_backup_for_business_agent An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-servi… CWE-346
 Origin Validation Error 		CVE-2025-66592 2026-06-3 01:08 2026-05-27 Show GitHub Exploit DB Packet Storm