Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226591 9.3 危険 power-tab - Power Tab Editor におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2311 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
226592 5 警告 SolarWinds - SolarWinds TFTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2310 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
226593 7.2 危険 ソフォス - Sophos Anti-Virus のフィルタドライバにおける権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2308 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
226594 4.3 警告 Sourcefire - Sourcefire 3D Sensor 1000 などのデフォルトインストールにおける SSL トラフィックを解読される脆弱性 CWE-16
環境設定 		CVE-2010-2306 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
226595 9.3 危険 シマンテック - Symantec Sygate Personal Firewall 用の SSHelper.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2305 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
226596 6.8 警告 pxsystem - Plume CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2294 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
226597 3.3 注意 snom - snom VoIP Phone の Web インターフェースにおける制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2291 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
226598 3.3 注意 Wireshark - IPMI dissector の SMB PIPE 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2285 2012-12-20 19:29 2010-06-9 Show GitHub Exploit DB Packet Storm
226599 5.1 警告 tomatocms - TomatoCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2282 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
226600 4.3 警告 tomatocms - TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2281 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2751 7.5 HIGH
Network 		zte zxcloud_irai A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service. CWE-134
NVD-CWE-noinfo
Use of Externally-Controlled Format String 		CVE-2026-44407 2026-05-12 01:41 2026-05-7 Show GitHub Exploit DB Packet Storm
2752 7.1 HIGH
Network 		monetr monetr monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF) vulnerability in monetr's Lunch Flow integration allowed any authenticated user… CWE-209
CWE-770
CWE-918
Information Exposure Through an Error Message
 Allocation of Resources Without Limits or Throttling
Server-Side Request Forgery (SSRF)  		CVE-2026-41644 2026-05-12 01:40 2026-05-7 Show GitHub Exploit DB Packet Storm
2753 7.5 HIGH
Network 		thalesgroup ercom_cryptobox Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access c… CWE-280
NVD-CWE-noinfo
Improper Handling of Insufficient Permissions or Privileges  		CVE-2026-6805 2026-05-12 01:37 2026-05-7 Show GitHub Exploit DB Packet Storm
2754 4.7 MEDIUM
Network 		- - A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation caus… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8273 2026-05-12 01:17 2026-05-11 Show GitHub Exploit DB Packet Storm
2755 6.3 MEDIUM
Network 		- - A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation … CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8217 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
2756 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-21709. Reason: This record is a duplicate of CVE-2026-21709. Notes: All CVE users should reference CVE-2026-21709 instead of this rec… - CVE-2025-63750 2026-05-12 01:17 2026-05-12 Show GitHub Exploit DB Packet Storm
2757 8.1 HIGH
Network 		weblate weblate Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an active billing/trial p… CWE-20
CWE-918
 Improper Input Validation 
Server-Side Request Forgery (SSRF)  		CVE-2026-41654 2026-05-12 00:30 2026-05-8 Show GitHub Exploit DB Packet Storm
2758 6.5 MEDIUM
Network 		mongodb mongodb An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whe… CWE-476
 NULL Pointer Dereference 		CVE-2026-8063 2026-05-12 00:26 2026-05-7 Show GitHub Exploit DB Packet Storm
2759 6.5 MEDIUM
Network 		apache cloudstack The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plug… CWE-863
 Incorrect Authorization 		CVE-2025-66170 2026-05-12 00:24 2026-05-8 Show GitHub Exploit DB Packet Storm
2760 7.5 HIGH
Network 		osrg gobgp GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending… CWE-476
 NULL Pointer Dereference 		CVE-2026-42285 2026-05-12 00:22 2026-05-7 Show GitHub Exploit DB Packet Storm