Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4051 9.1 緊急
Network
MIYAGAWA (Tatsuhiko Miyagawa) Plack::Middleware::Xsendfile MIYAGAWA (Tatsuhiko Miyagawa)のPlack::Middleware::Xsendfileにおける複数の脆弱性 CWE-200
CWE-441
CWE-913
CVE-2026-7381 2026-05-8 12:09 2026-04-29 Show GitHub Exploit DB Packet Storm
4052 8.1 重要
Network
D-Link Systems, Inc. M60 Firmware D-Link CorporationのM60 Firmwareにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2026-7554 2026-05-8 12:09 2026-05-1 Show GitHub Exploit DB Packet Storm
4053 9.8 緊急
Network
WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7690 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
4054 6.3 警告
Network
WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7691 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
4055 6.3 警告
Network
WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7692 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
4056 8 重要
Adjacent
TP-LINK Technologies Archer AXE75 Firmware TP-LINK TechnologiesのArcher AXE75 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-15568 2026-05-8 12:09 2026-03-9 Show GitHub Exploit DB Packet Storm
4057 6.5 警告
Network
HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2025-31982 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
4058 4.6 警告
Network
HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック
CVE-2025-31983 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
4059 6.1 警告
Network
phppointofsale php point of sale phppointofsaleのphp point of saleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-41011 2026-05-8 12:09 2026-04-21 Show GitHub Exploit DB Packet Storm
4060 4.3 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2025-59809 2026-05-8 12:09 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345861 - apple
google
webkit
chrome
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving th… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0661 2017-09-19 10:30 2010-02-19 Show GitHub Exploit DB Packet Storm
345862 - google chrome The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, … CWE-189
Numeric Errors
CVE-2010-0662 2017-09-19 10:30 2010-02-19 Show GitHub Exploit DB Packet Storm
345863 - google chrome The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow rem… CWE-200
Information Exposure
CVE-2010-0663 2017-09-19 10:30 2010-02-19 Show GitHub Exploit DB Packet Storm
345864 - google chrome Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cau… CWE-399
 Resource Management Errors
CVE-2010-0664 2017-09-19 10:30 2010-02-19 Show GitHub Exploit DB Packet Storm
345865 - redhat enterprise_linux A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via … CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0729 2017-09-19 10:30 2010-03-17 Show GitHub Exploit DB Packet Storm
345866 - gnu gnutls The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong data type and the wrong… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-0731 2017-09-19 10:30 2010-03-27 Show GitHub Exploit DB Packet Storm
345867 - gnu gnutls Per: http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/4230 "Please note that the problem was solved for GnuTLS 1.2.1, released on 2005-04-04. Also, 32-bit platforms are not affecte… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-0731 2017-09-19 10:30 2010-03-27 Show GitHub Exploit DB Packet Storm
345868 - openssl openssl The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which al… CWE-310
Cryptographic Issues
CVE-2010-0742 2017-09-19 10:30 2010-06-3 Show GitHub Exploit DB Packet Storm
345869 - piotr_roszatycki libnss-db The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information… CWE-200
Information Exposure
CVE-2010-0826 2017-09-19 10:30 2010-04-6 Show GitHub Exploit DB Packet Storm
345870 - tug tex_live
tetex
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual fo… CWE-189
Numeric Errors
CVE-2010-0827 2017-09-19 10:30 2010-05-8 Show GitHub Exploit DB Packet Storm