Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1281	6.5	警告 Network	Koha	Koha	Kohaにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-26379	2026-06-8 11:48	2026-06-3	Show	GitHub Exploit DB Packet Storm

1282	9	緊急 Network	lfprojects	mlflow	lfprojectsのmlflowにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-2651	2026-06-8 11:48	2026-05-25	Show	GitHub Exploit DB Packet Storm

1283	6.5	警告 Network	libxls project	libxls	libxls projectのlibxlsにおける初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-26824	2026-06-8 11:48	2026-06-3	Show	GitHub Exploit DB Packet Storm

1284	5.3	警告 Network	libxls project	libxls	libxls projectのlibxlsにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-26825	2026-06-8 11:48	2026-06-3	Show	GitHub Exploit DB Packet Storm

1285	7.5	重要 Network	SolarWinds	Web Help Desk	SolarWindsのWeb Help Deskにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-28299	2026-06-8 11:47	2026-06-2	Show	GitHub Exploit DB Packet Storm

1286	7.5	重要 Network	SolarWinds	Serv-U	SolarWindsのServ-Uにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28318	2026-06-8 11:47	2026-06-4	Show	GitHub Exploit DB Packet Storm

1287	7.1	重要 Network	librechat	librechat	LibreChatにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-31942	2026-06-8 11:47	2026-06-2	Show	GitHub Exploit DB Packet Storm

1288	9.6	緊急 Network	librechat	librechat	LibreChatにおける情報漏えいに関する脆弱性	CWE-200 CWE-noinfo	CVE-2026-32625	2026-06-8 11:47	2026-06-2	Show	GitHub Exploit DB Packet Storm

1289	4.7	警告 Network	Shopify	React Router	ShopifyのReact Routerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33245	2026-06-8 11:47	2026-06-2	Show	GitHub Exploit DB Packet Storm

1290	7.5	重要 Network	Python Software Foundation	Python	Python Software FoundationのPythonにおける複数の脆弱性	CWE-116 CWE-20	CVE-2026-3644	2026-06-8 11:47	2026-03-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310641	-	blackboard	transact_suite	BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml f…	CWE-200 Information Exposure	CVE-2010-3244	2024-11-21 10:18	2010-09-8	Show	GitHub Exploit DB Packet Storm

310642	-	microsoft	outlook_web_access	Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that pe…	CWE-352 Origin Validation Error	CVE-2010-3213	2024-11-21 10:18	2010-09-8	Show	GitHub Exploit DB Packet Storm

310643	-	seagullproject.org	seagull	SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQuestion parameter in a retrieve action, in conjunction with…	CWE-89 SQL Injection	CVE-2010-3212	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm

310644	-	jextn	com_jefaqpro	Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with …	CWE-89 SQL Injection	CVE-2010-3211	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm

310645	-	martin_lee	multi-lingual_e-commerce_system	Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) checkout2…	CWE-94 Code Injection	CVE-2010-3210	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm

310646	-	seagullproject.org	seagull	Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to (1) Config/Container.php and (2) HTM…	CWE-94 Code Injection	CVE-2010-3209	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm

310647	-	wiccle	wiccle_web_builder	Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site cu…	CWE-79 Cross-site Scripting	CVE-2010-3208	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm

310648	-	galeriashqip	galeriashqip	SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the album_id parameter. NOTE: some of t…	CWE-89 SQL Injection	CVE-2010-3207	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm

310649	-	diy-cms	diy-cms	Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to modules/guestbook/blocks/control.block.ph…	CWE-94 Code Injection	CVE-2010-3206	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm

310650	-	textpattern	textpattern	PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.	CWE-94 Code Injection	CVE-2010-3205	2024-11-21 10:18	2010-09-4	Show	GitHub Exploit DB Packet Storm