Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256451 9 危険 マイクロソフト - Microsoft Windows の LSASS におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0820 2010-10-6 16:55 2010-09-14 Show GitHub Exploit DB Packet Storm
256452 9.3 危険 マイクロソフト - Microsoft Windows の WordPad Text Converters における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2563 2010-10-6 16:55 2010-09-14 Show GitHub Exploit DB Packet Storm
256453 9.3 危険 マイクロソフト - Microsoft Windows の RPC クライアント実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2567 2010-10-6 16:55 2010-09-14 Show GitHub Exploit DB Packet Storm
256454 6.8 警告 マイクロソフト - Windows 上で稼働する Microsoft Internet Information Services におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-2731 2010-10-6 16:54 2010-09-14 Show GitHub Exploit DB Packet Storm
256455 9.3 危険 マイクロソフト - Microsoft Internet Information Services におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2730 2010-10-5 19:00 2010-09-14 Show GitHub Exploit DB Packet Storm
256456 4.3 警告 マイクロソフト - Microsoft Internet Information Services の ASP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1899 2010-10-5 18:59 2010-09-14 Show GitHub Exploit DB Packet Storm
256457 9.3 危険 マイクロソフト - Microsoft Outlook におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2728 2010-10-5 18:59 2010-09-14 Show GitHub Exploit DB Packet Storm
256458 9.3 危険 マイクロソフト - Microsoft Windows の USP10.DLL 内の Uniscribe 実装における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2738 2010-10-5 18:58 2010-09-14 Show GitHub Exploit DB Packet Storm
256459 9.3 危険 マイクロソフト - Microsoft Windows の MPEG-4 コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0818 2010-10-5 18:58 2010-09-14 Show GitHub Exploit DB Packet Storm
256460 9.3 危険 マイクロソフト - Microsoft Windows の Print Spooler サービスにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2729 2010-10-5 18:57 2010-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
6041 6.5 MEDIUM
Network 		github enterprise_server An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity p… CWE-306
Missing Authentication for Critical Function 		CVE-2026-6736 2026-05-12 02:20 2026-05-8 Show GitHub Exploit DB Packet Storm
6042 9.9 CRITICAL
Network 		mozilla 0din_scanner ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in `BrowserAutomati… CWE-94
Code Injection 		CVE-2026-41512 2026-05-12 02:20 2026-05-8 Show GitHub Exploit DB Packet Storm
6043 7.5 HIGH
Network 		github enterprise_server A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON p… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-7541 2026-05-12 02:19 2026-05-8 Show GitHub Exploit DB Packet Storm
6044 9.8 CRITICAL
Network 		github enterprise_server A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting URL parser confusi… CWE-436
CWE-918
 Interpretation Conflict
Server-Side Request Forgery (SSRF)  		CVE-2026-8034 2026-05-12 02:18 2026-05-8 Show GitHub Exploit DB Packet Storm
6045 6.1 MEDIUM
Network 		github enterprise_server A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The redirect_to query parameter on the /setup/… CWE-79
Cross-site Scripting 		CVE-2026-8106 2026-05-12 02:12 2026-05-8 Show GitHub Exploit DB Packet Storm
6046 7.2 HIGH
Network 		tenda ac6_firmware A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component httpd. The manipulation of the argument lan.ip lea… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8259 2026-05-12 02:07 2026-05-11 Show GitHub Exploit DB Packet Storm
6047 8.8 HIGH
Network 		tenda ac6_firmware A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Executing a manipulation … CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8264 2026-05-12 02:04 2026-05-11 Show GitHub Exploit DB Packet Storm
6048 7.2 HIGH
Network 		tenda ac6_firmware A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component httpd. The manipulation of the… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8265 2026-05-12 02:03 2026-05-11 Show GitHub Exploit DB Packet Storm
6049 5.4 MEDIUM
Network 		weblate weblate Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cycle_session_keys()", but DRF API tokens ("wlu_… CWE-613
 Insufficient Session Expiration 		CVE-2026-41519 2026-05-12 02:00 2026-05-8 Show GitHub Exploit DB Packet Storm
6050 5.4 MEDIUM
Network 		dani-garcia vaultwarden Vaultwarden is a Bitwarden-compatible server written in Rust. In versions 1.35.4 and earlier, the WebAuthn authentication flow in `validate_webauthn_login()` updates persistent credential metadata (1… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-31835 2026-05-12 01:59 2026-05-6 Show GitHub Exploit DB Packet Storm