Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2151	9	緊急 Local	MinecAnton209	NovumOS	MinecAnton209のNovumOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-40572	2026-04-28 10:10	2026-04-18	Show	GitHub Exploit DB Packet Storm

2152	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年04月23日）	-	-	2026-04-27 13:37	2026-04-24	Show	GitHub Exploit DB Packet Storm

2153	7.8	重要 Local	Giskard	Giskard	Giskardにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-40320	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2154	7.5	重要 Network	monetr	monetr	monetrにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40481	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2155	5.5	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40515	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2156	6.3	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-40516	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2157	7.6	重要 Network	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-6729	2026-04-27 11:29	2026-04-20	Show	GitHub Exploit DB Packet Storm

2158	9.8	緊急 Network	Topsec Technologies Group Inc.	Tianxin Internet Behavior Management System	Topsec Technologies Group Inc.のTianxin Internet Behavior Management SystemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2021-4473	2026-04-27 11:29	2026-04-7	Show	GitHub Exploit DB Packet Storm

2159	7.2	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性	CWE-94 CWE-95	CVE-2026-22666	2026-04-27 11:29	2026-04-7	Show	GitHub Exploit DB Packet Storm

2160	9.8	緊急 Network	Weaver Software	Weaver e cology	Weaver SoftwareのWeaver e cologyにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-22679	2026-04-27 11:29	2026-04-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347561	-	jaxcms	jaxcms	Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter.	CWE-22 Path Traversal	CVE-2010-1043	2010-03-23 13:00	2010-03-23	Show	GitHub Exploit DB Packet Storm

347562	-	design-cars	com_productbook	SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index…	CWE-89 SQL Injection	CVE-2010-1045	2010-03-23 13:00	2010-03-23	Show	GitHub Exploit DB Packet Storm

347563	-	uiga	business_portal	Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) i…	CWE-79 Cross-site Scripting	CVE-2010-1048	2010-03-23 13:00	2010-03-23	Show	GitHub Exploit DB Packet Storm

347564	-	alexandre_dubus	audistat	SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter.	CWE-89 SQL Injection	CVE-2010-1050	2010-03-23 13:00	2010-03-23	Show	GitHub Exploit DB Packet Storm

347565	-	alexandre_dubus	audistat	Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) month parameters. NOTE: the provenance of this i…	CWE-89 SQL Injection	CVE-2010-1051	2010-03-23 13:00	2010-03-23	Show	GitHub Exploit DB Packet Storm

347566	-	alexandre_dubus	audistat	Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) mday parameters. NOTE: the pro…	CWE-79 Cross-site Scripting	CVE-2010-1052	2010-03-23 13:00	2010-03-23	Show	GitHub Exploit DB Packet Storm

347567	-	marcus_krause	t3sec_saltedpw	The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors.	CWE-287 Improper Authentication	CVE-2010-1022	2010-03-23 02:17	2010-03-20	Show	GitHub Exploit DB Packet Storm

347568	-	sk-typo3	sk_simplegallery	Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified …	CWE-79 Cross-site Scripting	CVE-2010-1020	2010-03-23 01:58	2010-03-20	Show	GitHub Exploit DB Packet Storm

347569	-	mathias_schreiber	nf_cleandb	SQL injection vulnerability in the CleanDB (nf_cleandb) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-1012	2010-03-23 00:04	2010-03-20	Show	GitHub Exploit DB Packet Storm

347570	-	viewvc	viewvc	Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTM…	CWE-79 Cross-site Scripting	CVE-2010-0736	2010-03-22 13:00	2010-03-20	Show	GitHub Exploit DB Packet Storm