Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2031 7.5 重要
Network 		Julian Gruber (juliangruber) brace-expansion Julian Gruber (juliangruber)のbrace-expansionにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-45149 2026-06-5 10:46 2026-05-29 Show GitHub Exploit DB Packet Storm
2032 6.5 警告
Network 		Nextcloud Approval NextcloudのApprovalにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-45275 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2033 3.3 低
Local 		Nextcloud Approval NextcloudのApprovalにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-45277 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2034 6.1 警告
Network 		Nextcloud user oidc Nextcloudのuser oidcにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-45278 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2035 6.5 警告
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-45279 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2036 8.1 重要
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-45281 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2037 6.5 警告
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-45282 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2038 4.3 警告
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-45283 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2039 8.8 重要
Network 		Nextcloud user oidc Nextcloudのuser oidcにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-45284 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
2040 6.4 警告
Network 		Nextcloud Nextcloud Server NextcloudのNextcloud Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-45285 2026-06-5 10:46 2026-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310811 - hp insight_control_power_management Cross-site scripting (XSS) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-4023 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310812 - hp version_control_repository_manager
hp 		Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-3994 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310813 - hp insight_control_server_migration
insight_control_server_migration6.0.1 		Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors. NVD-CWE-noinfo
CVE-2010-3993 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310814 - hp insight_control_server_migration
insight_control_server_migration6.0.1 		Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote authenticated users to gain privileges via unknown vectors. NVD-CWE-noinfo
CVE-2010-3992 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310815 - hp insight_control_server_migration
insight_control_server_migration6.0.1 		Cross-site scripting (XSS) vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-3991 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310816 - hp virtual_server_environment Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files via unknown vectors. NVD-CWE-noinfo
CVE-2010-3990 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310817 - hp insight_control_virtual_machine_management Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vec… CWE-352
 Origin Validation Error 		CVE-2010-3989 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310818 - hp insight_control_virtual_machine_management Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors. NVD-CWE-noinfo
CVE-2010-3988 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310819 - hp insight_control_virtual_machine_management Cross-site scripting (XSS) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-3987 2024-11-21 10:20 2010-10-29 Show GitHub Exploit DB Packet Storm
310820 - nitrosecurity nitroview_esm_software ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess. CWE-20
 Improper Input Validation  		CVE-2010-4099 2024-11-21 10:20 2010-10-28 Show GitHub Exploit DB Packet Storm