Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1391	4.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-11309	2026-06-9 14:15	2026-06-5	Show	GitHub Exploit DB Packet Storm

1392	8.8	重要 Local	レッドハット	Red Hat OpenShift Container Platform	レッドハットのRed Hat OpenShift Container Platformにおけるシステム構成または設定の外部制御に関する脆弱性	CWE-15 システム構成または設定の外部制御	CVE-2026-1784	2026-06-9 14:15	2026-06-2	Show	GitHub Exploit DB Packet Storm

1393	6.1	警告 Network	シスコシステムズ	Cisco WebEx Meetings	シスコシステムズのCisco WebEx Meetingsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-20233	2026-06-9 14:14	2026-06-3	Show	GitHub Exploit DB Packet Storm

1394	6	警告 Network	Arista Networks, Inc.	NG Firewall	Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-25620	2026-06-9 14:14	2026-06-5	Show	GitHub Exploit DB Packet Storm

1395	6	警告 Network	Arista Networks, Inc.	NG Firewall	Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-25621	2026-06-9 14:14	2026-06-5	Show	GitHub Exploit DB Packet Storm

1396	6	警告 Network	Arista Networks, Inc.	NG Firewall	Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-25622	2026-06-9 14:14	2026-06-5	Show	GitHub Exploit DB Packet Storm

1397	6	警告 Network	Arista Networks, Inc.	NG Firewall	Arista Networks, Inc.のNG FirewallにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-25623	2026-06-9 14:14	2026-06-5	Show	GitHub Exploit DB Packet Storm

1398	4.8	警告 Network	Arista Networks, Inc.	NG Firewall	Arista Networks, Inc.のNG Firewallにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-25624	2026-06-9 14:14	2026-06-5	Show	GitHub Exploit DB Packet Storm

1399	6.8	警告 Adjacent	レッドハット Samba Project	Red Hat OpenShift Container Platform Samba Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品におけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2026-3012	2026-06-9 14:14	2026-05-27	Show	GitHub Exploit DB Packet Storm

1400	2.2	低 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-3109	2026-06-9 14:14	2026-03-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310081	-	harmistechnology	com_jedirectory	SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item ac…	CWE-89 SQL Injection	CVE-2010-4862	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310082	-	webspell	webspell	SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.	CWE-89 SQL Injection	CVE-2010-4861	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310083	-	galaxyscriptz	myphpauction	SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-4860	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310084	-	webasyst	shop-script	SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.	CWE-89 SQL Injection	CVE-2010-4859	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310085	-	joerg_risse	dnet_live-stats	Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the showlang parameter.	CWE-22 Path Traversal	CVE-2010-4858	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310086	-	curtiss_grymala	cag_cms	SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.	CWE-89 SQL Injection	CVE-2010-4857	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310087	-	aspindir	xweblog	SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.	CWE-89 SQL Injection	CVE-2010-4856	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310088	-	aspindir	xweblog	SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.	CWE-89 SQL Injection	CVE-2010-4855	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310089	-	zuitu	zuitu	SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action.	CWE-89 SQL Injection	CVE-2010-4854	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

310090	-	chillcreations	com_ccinvoices	SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.	CWE-89 SQL Injection	CVE-2010-4853	2024-11-21 10:21	2011-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed