Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1461 6.5 警告
Network
レッドハット Red Hat OpenShift Container Platform
OpenShift Router
レッドハットのRed Hat OpenShift Container Platform等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42965 2026-06-9 14:11 2026-05-29 Show GitHub Exploit DB Packet Storm
1462 8.7 重要
Network
SUSE Local Path Provisioner SUSEのLocal Path Provisionerにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-44543 2026-06-9 14:11 2026-05-28 Show GitHub Exploit DB Packet Storm
1463 9.6 緊急
Network
Guardrails AI Guardrails AI Guardrails AIにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード
CVE-2026-45758 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
1464 7.5 重要
Network
レッドハット Red Hat OpenShift Container Platform
OpenShift Router
レッドハットのRed Hat OpenShift Container Platform等の複数製品における認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-46579 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1465 5.3 警告
Network
Cosimo Net::statsd CosimoのNet::statsdにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-46739
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1466 7.5 重要
Network
Steve Sanbeg Etsy::StatsD Steve SanbegのEtsy::StatsDにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-46719
CVE-2026-46720
CVE-2026-46741
2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1467 9.8 緊急
Network
Advanced Micro Devices (AMD) AITER (AI Tensor Engine for ROCm) Advanced Micro Devices (AMD)のAITER (AI Tensor Engine for ROCm)における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-49121 2026-06-9 14:10 2026-06-1 Show GitHub Exploit DB Packet Storm
1468 9.8 緊急
Network
日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-49200 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1469 9.8 緊急
Network
日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2026-49201 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1470 6.5 警告
Network
RRWO (Robert Rothenberg) Net::CIDR::Set RRWO (Robert Rothenberg)のNet::CIDR::Setにおける安全でない等式による入力の不適切な検証に関する脆弱性 CWE-1289
安全でない等式による入力の不適切な検証
CVE-2026-49940 2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310341 - mybb mybb MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of [img] MyCodes by editing a post after it has been created. CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-4624 2024-11-21 10:21 2010-12-31 Show GitHub Exploit DB Packet Storm
310342 - mybb mybb Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to … CWE-79
Cross-site Scripting
CVE-2010-4522 2024-11-21 10:21 2010-12-31 Show GitHub Exploit DB Packet Storm
310343 - ibm tivoli_access_manager_for_e-business WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload actio… CWE-399
 Resource Management Errors
CVE-2010-4623 2024-11-21 10:21 2010-12-31 Show GitHub Exploit DB Packet Storm
310344 - ibm tivoli_access_manager_for_e-business Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (e… CWE-22
Path Traversal
CVE-2010-4622 2024-11-21 10:21 2010-12-31 Show GitHub Exploit DB Packet Storm
310345 - clear ispot_firmware
ispot
clearspot_firmware
clearspot
Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentica… CWE-352
 Origin Validation Error
CVE-2010-4507 2024-11-21 10:21 2010-12-31 Show GitHub Exploit DB Packet Storm
310346 - webscripti mafya_oyun_scrpti SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2010-4619 2024-11-21 10:21 2010-12-30 Show GitHub Exploit DB Packet Storm
310347 - algisinfo aicontactsafe Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2010-4618 2024-11-21 10:21 2010-12-30 Show GitHub Exploit DB Packet Storm
310348 - kanich com_jotloader Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section paramet… CWE-22
Path Traversal
CVE-2010-4617 2024-11-21 10:21 2010-12-30 Show GitHub Exploit DB Packet Storm
310349 - impresscms impresscms Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting
CVE-2010-4616 2024-11-21 10:21 2010-12-30 Show GitHub Exploit DB Packet Storm
310350 - iskenderaltuntas oto_galeri_sistemi Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac parameter to carsdetail.asp and the (2) marka parameter to t… CWE-89
SQL Injection
CVE-2010-4615 2024-11-21 10:21 2010-12-30 Show GitHub Exploit DB Packet Storm