Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1741 8.8 重要
Network 		Lawnchair Lawnchair Lawnchairにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-39866 2026-04-27 11:27 2026-04-21 Show GitHub Exploit DB Packet Storm
1742 6.1 警告
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-116
CWE-79
CVE-2026-40302 2026-04-27 11:27 2026-04-17 Show GitHub Exploit DB Packet Storm
1743 7.5 重要
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-400
CWE-789
CVE-2026-40303 2026-04-27 11:27 2026-04-17 Show GitHub Exploit DB Packet Storm
1744 5.3 警告
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-284
CWE-863
CVE-2026-40304 2026-04-27 11:27 2026-04-17 Show GitHub Exploit DB Packet Storm
1745 8.8 重要
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40502 2026-04-27 11:27 2026-04-16 Show GitHub Exploit DB Packet Storm
1746 6.5 警告
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40503 2026-04-27 11:27 2026-04-16 Show GitHub Exploit DB Packet Storm
1747 8.8 重要
Network 		FreePBX API Module FreePBXのAPI ModuleにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40520 2026-04-27 11:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1748 6.1 警告
Network 		Yusuke Inuzuka (yuin) goldmark Yusuke Inuzuka (yuin)のgoldmarkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-5160 2026-04-27 11:26 2026-04-15 Show GitHub Exploit DB Packet Storm
1749 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-0186 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1750 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-3922 2026-04-27 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347311 - cisco unified_communications_manager The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2), and 8.x before 8.0(1… NVD-CWE-Other
CVE-2010-0592 2010-03-6 01:30 2010-03-6 Show GitHub Exploit DB Packet Storm
347312 - ibm lotus_inotes Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.281 for Domino 8.0.2 FP4 allows remote attackers to inject arbitrary web script or HTML via vect… CWE-79
Cross-site Scripting 		CVE-2010-0920 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347313 - ibm aix Unspecified vulnerability in secldapclntd in IBM AIX 5.3 with SP 5300-11-02 allows attackers to cause a denial of service (LDAP login failure) via unknown vectors. NOTE: some of these details are ob… NVD-CWE-noinfo
CVE-2010-0922 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347314 - ibm aix Per: ftp://public.dhe.ibm.com/aix/efixes/iz69977/ IZ69977.epkg.Z NVD-CWE-noinfo
CVE-2010-0922 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347315 - kde kde_sc Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an una… CWE-362
Race Condition 		CVE-2010-0923 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347316 - apple safari cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long s… NVD-CWE-Other
CVE-2010-0924 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347317 - apple safari cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long string in t… NVD-CWE-Other
CVE-2010-0925 2010-03-4 14:00 2010-03-4 Show GitHub Exploit DB Packet Storm
347318 - jtl-software jtl-shop SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter. CWE-89
SQL Injection 		CVE-2010-0691 2010-03-3 14:00 2010-02-24 Show GitHub Exploit DB Packet Storm
347319 - iptechinside com_jquarks SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to i… CWE-89
SQL Injection 		CVE-2010-0692 2010-03-3 14:00 2010-02-24 Show GitHub Exploit DB Packet Storm
347320 - tdiary tdiary Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vecto… CWE-79
Cross-site Scripting 		CVE-2010-0726 2010-03-3 14:00 2010-03-3 Show GitHub Exploit DB Packet Storm