Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2031 9.6 緊急
Network 		Cline Cline Clineにおける複数の脆弱性 CWE-1385
CWE-306
CVE-2026-44211 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2032 7.5 重要
Network 		Julian Gruber (juliangruber) brace-expansion Julian Gruber (juliangruber)のbrace-expansionにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-45149 2026-06-5 10:46 2026-05-29 Show GitHub Exploit DB Packet Storm
2033 6.5 警告
Network 		Nextcloud Approval NextcloudのApprovalにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-45275 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2034 3.3 低
Local 		Nextcloud Approval NextcloudのApprovalにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-45277 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2035 6.1 警告
Network 		Nextcloud user oidc Nextcloudのuser oidcにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-45278 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2036 6.5 警告
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-45279 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2037 8.1 重要
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-45281 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2038 6.5 警告
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-45282 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2039 4.3 警告
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-45283 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2040 8.8 重要
Network 		Nextcloud user oidc Nextcloudのuser oidcにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-45284 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310651 - dynpg dynpg Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the CHG_D… CWE-22
Path Traversal 		CVE-2010-4399 2024-11-21 10:20 2010-12-6 Show GitHub Exploit DB Packet Storm
310652 - novo-ws orbis_cms Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a … NVD-CWE-Other
CVE-2010-4313 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310653 - artica pandora_fms PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parameter. CWE-94
Code Injection 		CVE-2010-4283 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310654 - artica pandora_fms Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id param… CWE-22
Path Traversal 		CVE-2010-4282 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310655 - artica pandora_fms Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containi… CWE-94
Code Injection 		CVE-2010-4281 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310656 - artica pandora_fms Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente… CWE-89
SQL Injection 		CVE-2010-4280 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310657 - artica pandora_fms The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.ph… CWE-287
Improper Authentication 		CVE-2010-4279 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310658 - artica pandora_fms operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/n… CWE-78
OS Command  		CVE-2010-4278 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310659 - nullsoft winamp The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length. CWE-399
 Resource Management Errors 		CVE-2010-4374 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm
310660 - nullsoft winamp The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via crafted (1) metadata or (2) albumart in an invalid MP4 file. NVD-CWE-Other
CVE-2010-4373 2024-11-21 10:20 2010-12-3 Show GitHub Exploit DB Packet Storm