Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
246441	7.5	危険	eztechhelp company	-	EZTechhelp EZCMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2921	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246442	7.5	危険	ezcms	-	EZTechhelp EZCMS のファイルマネージャにおけるファイル削除される脆弱性	CWE-287 不適切な認証	CVE-2008-2920	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246443	6.8	警告	gryphonllc	-	Gryphon gllcTS2 の listing.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2919	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246444	7.5	危険	application dynamics	-	Application Dynamics Cartweaver の details.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2918	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246445	6.8	警告	devalcms	-	Devalcms の func.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2913	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246446	7.5	危険	CONTENIDO	-	Contenido CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2912	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246447	4.3	警告	CONTENIDO	-	Contenido の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2911	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246448	7.5	危険	clever copy	-	Clever Copy の results.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2909	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246449	6.8	警告	awbs	-	AWBS の news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2903	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

246450	7.5	危険	AlstraSoft	-	AlstraSoft AskMe Pro の profile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2902	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1711	7.5	HIGH Network	mozilla	firefox	Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2026-10701	2026-06-5 02:25	2026-06-3	Show	GitHub Exploit DB Packet Storm

1712	5.3	MEDIUM Network	-	-	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log …	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-41178	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1713	7.1	HIGH Physics	-	-	GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active toke…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-36176	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1714	6.8	MEDIUM Physics	-	-	An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted str…	CWE-20 CWE-288 Improper Input Validation Authentication Bypass Using an Alternate Path or Channel	CVE-2026-36175	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

1715	9.1	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8644	2026-06-5 01:58	2026-06-2	Show	GitHub Exploit DB Packet Storm

1716	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.	CWE-502 Deserialization of Untrusted Data	CVE-2026-9319	2026-06-5 01:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

1717	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.	CWE-94 Code Injection	CVE-2026-9311	2026-06-5 01:53	2026-06-2	Show	GitHub Exploit DB Packet Storm

1718	8.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This could result in remo…	CWE-502 Deserialization of Untrusted Data	CVE-2026-9330	2026-06-5 01:52	2026-06-2	Show	GitHub Exploit DB Packet Storm

1719	5.5	MEDIUM Local	pypa	pip	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed out…	CWE-22 Path Traversal	CVE-2026-8643	2026-06-5 01:52	2026-06-2	Show	GitHub Exploit DB Packet Storm

1720	6.8	MEDIUM Network	nextcloud	nextcloud_server	Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticate…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-45810	2026-06-5 01:51	2026-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed