Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1801	9.8	緊急 Network	Joomla!	Joomla!	Joomla!における不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-48902	2026-06-3 15:34	2026-05-26	Show	GitHub Exploit DB Packet Storm

1802	6.6	警告 Network	Jenkins プロジェクト	Active Directory	JenkinsのActive Directoryにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-48918	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1803	6.6	警告 Network	Jenkins プロジェクト	Active Directory	JenkinsのActive Directoryにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-48919	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1804	8.8	重要 Network	Jenkins プロジェクト	Email Extension Plugin	JenkinsのEmail Extension Pluginにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-48920	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1805	7.5	重要 Network	Jenkins プロジェクト	Credentials Binding	JenkinsのCredentials Bindingにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-48922	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1806	4.3	警告 Network	Jenkins プロジェクト	AppSpider	JenkinsのAppSpiderにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-48923	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1807	4.3	警告 Network	Jenkins プロジェクト	Bitbucket OAuth	JenkinsのBitbucket OAuthにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-48924	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1808	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-5272	2026-06-3 15:34	2026-04-1	Show	GitHub Exploit DB Packet Storm

1809	5.5	警告 Local	IBM	IBM App Connect Enterprise	IBMのIBM App Connect Enterpriseにおける重要な情報のセキュアでない格納に関する脆弱性	CWE-922 重要な情報のセキュアでない格納	CVE-2026-5515	2026-06-3 15:34	2026-05-27	Show	GitHub Exploit DB Packet Storm

1810	8.8	重要 Network	Agilonhealth (MphRx)	Minerva	Agilonhealth (MphRx)のMinervaにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-5781	2026-06-3 15:34	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311171	-		ibm	websphere_mq	IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information b…	CWE-310 Cryptographic Issues	CVE-2010-2637	2024-11-21 10:17	2010-11-13	Show	GitHub Exploit DB Packet Storm

311172	-		microsoft	forefront_unified_access_gateway	Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitra…	CWE-79 Cross-site Scripting	CVE-2010-2734	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311173	-		microsoft	forefront_unified_access_gateway	Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary…	CWE-79 Cross-site Scripting	CVE-2010-2733	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311174	-		microsoft	forefront_unified_access_gateway	Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary…	CWE-20 Improper Input Validation	CVE-2010-2732	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311175	-		horde	horde_application_framework	Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir paramet…	CWE-79 Cross-site Scripting	CVE-2010-3077	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311176	-		cisco	intelligent_contact_manager	Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-3040	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311177	-		cisco	unified_communications_manager	/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via …	CWE-78 OS Command	CVE-2010-3039	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311178	-		ibm	websphere_commerce	Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2010-2636	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311179	-		ibm	websphere_commerce	SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admi…	CWE-89 SQL Injection	CVE-2010-2635	2024-11-21 10:17	2010-11-10	Show	GitHub Exploit DB Packet Storm

311180	9.8	CRITICAL Network	apple fedoraproject canonical debian opensuse suse redhat	cups mac_os_x_server mac_os_x fedora ubuntu_linux debian_linux opensuse linux_enterprise_server linux_enterprise enterprise_linux_server enterprise_linux enterprise_l…	ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-f…	CWE-416 Use After Free	CVE-2010-2941	2024-11-21 10:17	2010-11-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed