Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1911	9	緊急 Network	IBM	IBM WebSphere Application Server	IBMのIBM WebSphere Application Serverにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-9311	2026-06-8 11:44	2026-06-1	Show	GitHub Exploit DB Packet Storm

1912	9	緊急 Network	IBM	IBM WebSphere Application Server	IBMのIBM WebSphere Application Serverにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-9319	2026-06-8 11:44	2026-06-1	Show	GitHub Exploit DB Packet Storm

1913	8.5	重要 Network	IBM	IBM WebSphere Application Server	IBMのIBM WebSphere Application Serverにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-9330	2026-06-8 11:44	2026-06-1	Show	GitHub Exploit DB Packet Storm

1914	-	-	（複数のベンダ）	（複数の製品）	Securly Chrome Extensionにおける複数の脆弱性	-	-	2026-06-5 13:34	2026-06-4	Show	GitHub Exploit DB Packet Storm

1915	6.7	警告 Adjacent	TP-Link Systems Inc.	Tapo P300 Tapo L535E Tapo D100C	複数のTP-LINK製品における重要情報の平文送信の脆弱性	CWE-Other その他	CVE-2026-34126	2026-06-5 12:08	2026-06-5	Show	GitHub Exploit DB Packet Storm

1916	9.8	緊急 Network	deltasql Project	deltasql	deltasql Projectのdeltasqlにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25412	2026-06-5 10:52	2026-05-30	Show	GitHub Exploit DB Packet Storm

1917	7.5	重要 Network	WinMTR	WinMTR	WinMTRにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2018-25426	2026-06-5 10:52	2026-05-30	Show	GitHub Exploit DB Packet Storm

1918	7.8	重要 Local	4mhz	Base64 Decoder	4mhzのBase64 Decoderにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2019-25634	2026-06-5 10:52	2026-03-24	Show	GitHub Exploit DB Packet Storm

1919	7.8	重要 Local	Google	Android XR	GoogleのAndroid XRにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-0072	2026-06-5 10:52	2026-06-1	Show	GitHub Exploit DB Packet Storm

1920	9.8	緊急 Network	TRENDnet	TEW-432BRP Firmware	TRENDnetのTEW-432BRP Firmwareにおける複数の脆弱性	CWE-74 CWE-77	CVE-2026-10060	2026-06-5 10:52	2026-05-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310351	-	mhproducts	ero_auktion	SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-0723.	CWE-89 SQL Injection	CVE-2010-4614	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310352	-	hycus	hycus_cms	Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the site parameter to (1) index.php and (2) a…	CWE-22 Path Traversal	CVE-2010-4613	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310353	-	hycus	hycus_cms	Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_e…	CWE-89 SQL Injection	CVE-2010-4612	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310354	-	html-edit	html-edit_cms	Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2) menu.php in includes/core_files and (3) extensions/login/frontend/pages/antih…	CWE-200 Information Exposure	CVE-2010-4611	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310355	-	html-edit	html-edit_cms	Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML via the error parameter.	CWE-79 Cross-site Scripting	CVE-2010-4610	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310356	-	html-edit	html-edit_cms	SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action.	CWE-89 SQL Injection	CVE-2010-4609	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310357	-	habariproject	habari	Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an erro…	CWE-200 Information Exposure	CVE-2010-4608	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310358	-	habariproject	habari	Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter…	CWE-79 Cross-site Scripting	CVE-2010-4607	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310359	-	ibm	tivoli_storage_manager	Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x bef…	NVD-CWE-noinfo	CVE-2010-4606	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm

310360	-	ibm	tivoli_storage_manager	Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 …	NVD-CWE-noinfo	CVE-2010-4605	2024-11-21 10:21	2010-12-30	Show	GitHub Exploit DB Packet Storm