Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244971 7.8 危険 シスコシステムズ - Cisco PGW 2200 Softswitch の SIP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1561 2012-06-26 16:19 2010-05-12 Show GitHub Exploit DB Packet Storm
244972 3.5 注意 Angry Donuts
Drupal
- Drupal の Chaos Tool Suite モジュールの auto-complete 機能における非公開ノードのタイトルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1548 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
244973 6.8 警告 Angry Donuts
Drupal
- Drupal の Chaos Tool Suite モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-1547 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
244974 6 警告 Angry Donuts
Drupal
- Drupal の Chaos Tool Suite モジュールの import 機能における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1546 2012-06-26 16:19 2010-05-19 Show GitHub Exploit DB Packet Storm
244975 5 警告 ACME Laboratories
rca
- RCA DCM425 ケーブルモデムの micro_httpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1544 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
244976 4.3 警告 etracker
Drupal
- Drupal の eTracker モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1543 2012-06-26 16:19 2010-03-3 Show GitHub Exploit DB Packet Storm
244977 6.8 警告 dragonfrugal - DFD Cart の admin/configure.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-1542 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
244978 4.3 警告 dragonfrugal - DFD Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1541 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
244979 7.5 危険 bluestrikeweb - phpRAINCHECK の print_raincheck.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1538 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
244980 7.5 危険 francois bissonnette - phpCDB におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1537 2012-06-26 16:19 2010-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2721 3.3 LOW
Local
- - HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized access and may lead to information exposure. - CVE-2025-62338 2026-06-5 14:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2722 4.1 MEDIUM
Network
- - Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page CWE-79
Cross-site Scripting
CVE-2026-37700 2026-06-5 11:17 2026-06-4 Show GitHub Exploit DB Packet Storm
2723 8.1 HIGH
Adjacent
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabl… CWE-306
Missing Authentication for Critical Function
CVE-2026-36603 2026-06-5 11:17 2026-06-4 Show GitHub Exploit DB Packet Storm
2724 4.3 MEDIUM
Adjacent
- - Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action. An unauthenticated attacker on the adjacent network can obtain a raw … CWE-200
Information Exposure
CVE-2026-36602 2026-06-5 11:17 2026-06-4 Show GitHub Exploit DB Packet Storm
2725 7.5 HIGH
Network
google chrome Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome… CWE-843
Type Confusion
CVE-2026-10022 2026-06-5 11:16 2026-05-29 Show GitHub Exploit DB Packet Storm
2726 4.7 MEDIUM
Local
linaro op-tee OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of t… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-45614 2026-06-5 09:20 2026-06-4 Show GitHub Exploit DB Packet Storm
2727 9.8 CRITICAL
Network
acer predator_connect_w6x_firmware Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device. CWE-77
Command Injection
CVE-2026-49199 2026-06-5 04:44 2026-05-29 Show GitHub Exploit DB Packet Storm
2728 9.6 CRITICAL
Network
huggingface transformers A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-5241 2026-06-5 03:54 2026-06-3 Show GitHub Exploit DB Packet Storm
2729 6.5 MEDIUM
Network
koha koha Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-26379 2026-06-5 03:54 2026-06-4 Show GitHub Exploit DB Packet Storm
2730 8.1 HIGH
Network
shopify react-router React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through extern… CWE-502
 Deserialization of Untrusted Data
CVE-2026-42211 2026-06-5 03:50 2026-06-3 Show GitHub Exploit DB Packet Storm