Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1281 7 重要
Local 		Vim Vim Vimにおける複数の脆弱性 CWE-78
CWE-88
CVE-2026-46483 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
1282 7.3 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-46586 2026-05-21 10:50 2026-05-19 Show GitHub Exploit DB Packet Storm
1283 5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-6333 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1284 6.5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-6340 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1285 9.8 緊急
Network 		LMSYS Org SGLang LMSYS OrgのSGLangにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-7301 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1286 9.1 緊急
Network 		LMSYS Org SGLang LMSYS OrgのSGLangにおけるパストラバーサルの脆弱性 CWE-35
パストラバーサル 		CVE-2026-7302 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1287 9.8 緊急
Network 		LMSYS Org SGLang LMSYS OrgのSGLangにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-7304 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
1288 5.5 警告
Local 		Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-122
CWE-125
CVE-2026-8212 2026-05-21 10:49 2026-05-9 Show GitHub Exploit DB Packet Storm
1289 5.5 警告
Local 		Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 CWE-119
CWE-122
CWE-125
CVE-2026-8213 2026-05-21 10:49 2026-05-9 Show GitHub Exploit DB Packet Storm
1290 7.5 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-8510 2026-05-21 10:49 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345261 - ilya_ivanchenko itweak_upload Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users, with create content and upload fil… CWE-79
Cross-site Scripting 		CVE-2010-0697 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345262 - dynamicsoft wsc_cms SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are o… CWE-89
SQL Injection 		CVE-2010-0698 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345263 - wampserver wampserver Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter. CWE-79
Cross-site Scripting 		CVE-2010-0700 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345264 - newgensoft omnidocs SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2010-0701 2017-08-17 10:32 2010-02-24 Show GitHub Exploit DB Packet Storm
345265 - subexworld nikira_fraud_management_system Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter. CWE-79
Cross-site Scripting 		CVE-2010-0706 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345266 - timeclock-software employee_timeclock_software Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create n… CWE-352
 Origin Validation Error 		CVE-2010-0707 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345267 - sun java_system_directory_server Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enter… NVD-CWE-noinfo
CVE-2010-0708 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345268 - limny limny Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authentication of users or administrators for requests that change the email address o… CWE-352
 Origin Validation Error 		CVE-2010-0709 2017-08-17 10:32 2010-02-26 Show GitHub Exploit DB Packet Storm
345269 - zenoss zenoss Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before 2.5, allow remote authenticated users to execute arbitrary SQL commands via the… CWE-89
SQL Injection 		CVE-2010-0712 2017-08-17 10:32 2010-02-27 Show GitHub Exploit DB Packet Storm
345270 - moinmo moinmoin The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors. CWE-16
Configuration 		CVE-2010-0717 2017-08-17 10:32 2010-02-27 Show GitHub Exploit DB Packet Storm