Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2421	4.9	警告 Network	アルバネットワークス株式会社	ArubaOS	アルバネットワークス株式会社のArubaOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-44874	2026-05-18 11:24	2026-05-12	Show	GitHub Exploit DB Packet Storm

2422	9.1	緊急 Network	OPNsense project	OPNsense	OPNsenseにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-45158	2026-05-18 11:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2423	5.3	警告 Network	Apache Software Foundation	Apache Commons Configuration	Apache Software FoundationのApache Commons Configurationにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-45205	2026-05-18 11:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

2424	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-4524	2026-05-18 11:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

2425	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-4527	2026-05-18 11:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

2426	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-6063	2026-05-18 11:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

2427	5.4	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-6073	2026-05-18 11:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

2428	5.4	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-6335	2026-05-18 11:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

2429	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-6883	2026-05-18 11:24	2026-05-14	Show	GitHub Exploit DB Packet Storm

2430	9.8	緊急 Network	libexpat project	libexpat	libexpat projectのlibexpatにおけるエントロピー不足に関する脆弱性	CWE-331 エントロピー不足	CVE-2026-7210	2026-05-18 11:24	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345571	-	templateplazza	com_tpjobs	SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id_c[] parameter in a resadvsearch action to index.php.	CWE-89 SQL Injection	CVE-2010-0981	2017-08-17 10:32	2010-03-17	Show	GitHub Exploit DB Packet Storm

345572	-	utilo	rezervi	PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the …	CWE-94 Code Injection	CVE-2010-0983	2017-08-17 10:32	2010-03-17	Show	GitHub Exploit DB Packet Storm

345573	-	acidcat	acidcat_cms	Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direc…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0984	2017-08-17 10:32	2010-03-17	Show	GitHub Exploit DB Packet Storm

345574	-	chris_simon	com_abbrev	Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the co…	CWE-22 Path Traversal	CVE-2010-0985	2017-08-17 10:32	2010-03-17	Show	GitHub Exploit DB Packet Storm

345575	-	chris_wederka	tgm_newsletter	SQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-1024	2017-08-17 10:32	2010-03-20	Show	GitHub Exploit DB Packet Storm

345576	-	chris_wederka	tgm_newsletter	Cross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-1025	2017-08-17 10:32	2010-03-20	Show	GitHub Exploit DB Packet Storm

345577	-	mathon_nicolas	tmsw_cleandb	SQL injection vulnerability in the CleanDB - DBAL (tmsw_cleandb) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-1026	2017-08-17 10:32	2010-03-20	Show	GitHub Exploit DB Packet Storm

345578	-	dietmar_schffer	travelmate	SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-1027	2017-08-17 10:32	2010-03-20	Show	GitHub Exploit DB Packet Storm

345579	-	microsoft	windows_media_player	Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code vi…	NVD-CWE-noinfo	CVE-2010-1042	2017-08-17 10:32	2010-03-23	Show	GitHub Exploit DB Packet Storm

345580	-	manageengine	oputils	SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter.	CWE-89 SQL Injection	CVE-2010-1044	2017-08-17 10:32	2010-03-23	Show	GitHub Exploit DB Packet Storm