Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1231	5.5	警告 Local	Canonical	Ubuntu	CanonicalのUbuntuにおけるデッドロックに関する脆弱性	CWE-833 デッドロック	CVE-2026-47334	2026-06-10 14:25	2026-05-28	Show	GitHub Exploit DB Packet Storm

1232	7.1	重要 Network	Grokability, Inc.	Snipe-IT	Grokability, Inc.のSnipe-ITにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-48507	2026-06-10 14:25	2026-06-8	Show	GitHub Exploit DB Packet Storm

1233	5.8	警告 Network	Arista Networks, Inc.	Arista EOS	Arista Networks, Inc.のArista EOSにおける要素の欠如による不完全な比較に関する脆弱性	CWE-1023 要素の欠如による不完全な比較	CVE-2026-7473	2026-06-10 14:25	2026-06-5	Show	GitHub Exploit DB Packet Storm

1234	5.3	警告 Network	Check MK	Check MK	Check MKにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-7765	2026-06-10 14:25	2026-06-8	Show	GitHub Exploit DB Packet Storm

1235	5.4	警告 Network	Check MK	Check MK	Check MKにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-8833	2026-06-10 14:24	2026-06-8	Show	GitHub Exploit DB Packet Storm

1236	-	-	日立	Hitachi Web Server - Custom Edition uCosminexus Developer Professional for Plug-in Hitachi Application Server for Developers …	Cosminexus HTTP ServerおよびHitachi Web Serverにおける脆弱性	-	CVE-2025-65082	2026-06-10 11:05	2026-06-9	Show	GitHub Exploit DB Packet Storm

1237	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-11006	2026-06-9 14:22	2026-06-4	Show	GitHub Exploit DB Packet Storm

1238	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11007	2026-06-9 14:22	2026-06-4	Show	GitHub Exploit DB Packet Storm

1239	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-11008	2026-06-9 14:22	2026-06-4	Show	GitHub Exploit DB Packet Storm

1240	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-11009	2026-06-9 14:22	2026-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310071	-	pilotcart	pilot_cart	SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter.	CWE-89 SQL Injection	CVE-2010-4872	2024-11-21 10:21	2011-10-7	Show	GitHub Exploit DB Packet Storm

310072	-	smartftp	smartftp	Unspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown impact via a long filename.	NVD-CWE-noinfo	CVE-2010-4871	2024-11-21 10:21	2011-10-7	Show	GitHub Exploit DB Packet Storm

310073	-	bloofox	bloofoxcms	SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter.	CWE-89 SQL Injection	CVE-2010-4870	2024-11-21 10:21	2011-10-7	Show	GitHub Exploit DB Packet Storm

310074	-	drbenhur	dbhcms	SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter.	CWE-89 SQL Injection	CVE-2010-4869	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310075	-	w-agora	w-agora	Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter.	CWE-79 Cross-site Scripting	CVE-2010-4868	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310076	-	w-agora	w-agora	Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bn parame…	CWE-22 Path Traversal	CVE-2010-4867	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310077	-	chipmunk-scripts	chipmunk_board	SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.	CWE-89 SQL Injection	CVE-2010-4866	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310078	-	harmistechnology	com_jeguestbook	SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail acti…	CWE-89 SQL Injection	CVE-2010-4865	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310079	-	danieljamesscott	com_clubmanager	SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cm_id parameter in an equip presenta action t…	CWE-89 SQL Injection	CVE-2010-4864	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310080	-	get-simple	getsimple_cms	Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter.	CWE-79 Cross-site Scripting	CVE-2010-4863	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed