Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2041	5.3	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24711	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

2042	7.3	重要 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-24712	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

2043	9.8	緊急 Network	Open JS Foundation	WebdriverIO	Open JS FoundationのWebdriverIOにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-25244	2026-05-21 10:55	2026-05-18	Show	GitHub Exploit DB Packet Storm

2044	6.5	警告 Network	マイクロソフト	Power Automate for Desktop	Microsoft Power Automate デスクトップの情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2026-40374	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

2045	7.8	重要 Local	protobufjs project	protobufjs-cli	protobufjs projectのprotobufjs-cliにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-42290	2026-05-21 10:55	2026-05-13	Show	GitHub Exploit DB Packet Storm

2046	6.1	警告 Network	beaugunderson	ip-address	beaugundersonのip-addressにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42338	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

2047	7.6	重要 Network	PocketBase	PocketBase	PocketBaseにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-44166	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

2048	7.2	重要 Network	German Cancer Research Center (DKFZ)	nnU-Net	German Cancer Research Center (DKFZ)のnnU-Netにおけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2026-44246	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

2049	8.7	重要 Network	protobufjs project	protobufjs-cli	protobufjs projectのprotobufjs-cliにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-44295	2026-05-21 10:55	2026-05-13	Show	GitHub Exploit DB Packet Storm

2050	9.8	緊急 Network	WGDashboard	WGDashboard	WGDashboardにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-44343	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311211	-	kvirc	kvirc	Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors.	CWE-134 Use of Externally-Controlled Format String	CVE-2010-2451	2024-11-21 10:16	2010-06-30	Show	GitHub Exploit DB Packet Storm

311212	-	dacian_strain	com_jfaq	Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2 for Joomla!, when magic_quotes_gpc is disabled, allow (1) remote attackers to execute arbitrary SQL commands v…	CWE-89 SQL Injection	CVE-2010-2515	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311213	-	dacian_strain	com_jfaq	Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action t…	CWE-79 Cross-site Scripting	CVE-2010-2514	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311214	-	harmistechnology	com_jeajaxeventcalendar	SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to ind…	CWE-89 SQL Injection	CVE-2010-2513	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311215	-	2daybiz	matrimonial_script	SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-2512	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311216	-	2daybiz	multi_level_marketing_software	SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to execute arbitrary SQL commands via the nwsid parameter.	CWE-89 SQL Injection	CVE-2010-2511	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311217	-	2daybiz	web_template_software	SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter.	CWE-89 SQL Injection	CVE-2010-2510	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311218	-	2daybiz	web_template_software	Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and th…	CWE-79 Cross-site Scripting	CVE-2010-2509	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311219	-	2daybiz	video_community_portal_script	SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter.	CWE-89 SQL Injection	CVE-2010-2508	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

311220	-	masselink	com_picasa2gallery	Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified othe…	CWE-22 Path Traversal	CVE-2010-2507	2024-11-21 10:16	2010-06-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed