Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1301	9.1	緊急 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33598	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

1302	8.1	重要 Adjacent	PowerDNS	dnsdist	PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33599	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

1303	8.2	重要 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-33602	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

1304	10	緊急 Network	Flatpak	Flatpak	FlatpakにおけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-34078	2026-04-27 10:50	2026-04-7	Show	GitHub Exploit DB Packet Storm

1305	9.1	緊急 Network		-	オラクルのEnterprise Manager Base Platformにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34279	2026-04-27 10:50	2026-04-21	Show	GitHub Exploit DB Packet Storm

1306	4.7	警告 Network	オラクル	Oracle Applications Framework	オラクルのOracle Applications Frameworkにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34298	2026-04-27 10:50	2026-04-21	Show	GitHub Exploit DB Packet Storm

1307	6.5	警告 Network	オラクル	PeopleSoft Enterprise FIN Maintenance Management	オラクルのPeopleSoft Enterprise FIN Maintenance Managementにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34299	2026-04-27 10:49	2026-04-21	Show	GitHub Exploit DB Packet Storm

1308	6.5	警告 Network	オラクル	PeopleSoft Enterprise FIN Maintenance Management	オラクルのPeopleSoft Enterprise FIN Maintenance Managementにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34301	2026-04-27 10:49	2026-04-21	Show	GitHub Exploit DB Packet Storm

1309	5.5	警告 Network	オラクル	Oracle Workflow	オラクルのOracle Workflowにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34302	2026-04-27 10:49	2026-04-21	Show	GitHub Exploit DB Packet Storm

1310	7.5	重要 Network	オラクル	Oracle WebLogic Server	オラクルのOracle WebLogic Serverにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-34305	2026-04-27 10:49	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313691	-	microsoft	windows_xp windows_vista	The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service (memory and CPU consumption…	CWE-399 Resource Management Errors	CVE-2010-1098	2024-02-14 10:17	2010-03-25	Show	GitHub Exploit DB Packet Storm

313692	-	kiss-software	com_ksadvertiser	SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid para…	CWE-89 SQL Injection	CVE-2010-0946	2024-02-14 10:17	2010-03-9	Show	GitHub Exploit DB Packet Storm

313693	-	visualizationlibrary	visualization_library	Multiple unspecified vulnerabilities in Visualization Library before 2009.08.812 have unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2010-0937	2024-02-14 10:17	2010-03-9	Show	GitHub Exploit DB Packet Storm

313694	-	apache	http_server	modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request proces…	NVD-CWE-noinfo	CVE-2010-0425	2024-02-14 10:17	2010-03-6	Show	GitHub Exploit DB Packet Storm

313695	-	commodityrentals	cd_rental_software	SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.	CWE-89 SQL Injection	CVE-2010-0762	2024-02-14 10:17	2010-03-3	Show	GitHub Exploit DB Packet Storm

313696	-	commodityrentals	books\/ebooks_rentals_script	SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a gamecatalog action.	CWE-89 SQL Injection	CVE-2010-0761	2024-02-14 10:17	2010-03-3	Show	GitHub Exploit DB Packet Storm

313697	-	thegreenbow	ipsec_vpn_client	Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-0392	2024-02-14 10:17	2010-01-27	Show	GitHub Exploit DB Packet Storm

313698	-	chumpsoft	phpquestionnaire	PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[phpQRootDir] par…	NVD-CWE-Other	CVE-2006-4966	2024-02-14 10:17	2006-09-25	Show	GitHub Exploit DB Packet Storm

313699	-	maxdev	md-pro	Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanism…	NVD-CWE-Other	CVE-2006-4964	2024-02-14 10:17	2006-09-23	Show	GitHub Exploit DB Packet Storm

313700	-	phpbb_xs	phpbb_xs	PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_pa…	NVD-CWE-Other	CVE-2006-4893	2024-02-14 10:17	2006-09-20	Show	GitHub Exploit DB Packet Storm