Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2481 6.5 警告
Network 		- アップルのmacOSにおける複数の脆弱性 CWE-200
CWE-284
CVE-2026-28922 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2482 7.5 重要
Network 		アップル tvOS
iOS
iPadOS
visionos 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28940 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2483 7.1 重要
Network 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28941 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2484 6.5 警告
Network 		- アップルのmacOSにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-28946 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2485 8.8 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-28947 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2486 7.5 重要
Network 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-28952 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2487 7.5 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28955 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2488 6.5 警告
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における複数の脆弱性 CWE-125
CWE-787
CVE-2026-28956 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2489 3.3 低
Local 		アップル visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28957 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
2490 7.5 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-28959 2026-05-15 11:04 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345571 - templateplazza com_tpjobs SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id_c[] parameter in a resadvsearch action to index.php. CWE-89
SQL Injection 		CVE-2010-0981 2017-08-17 10:32 2010-03-17 Show GitHub Exploit DB Packet Storm
345572 - utilo rezervi PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the … CWE-94
Code Injection 		CVE-2010-0983 2017-08-17 10:32 2010-03-17 Show GitHub Exploit DB Packet Storm
345573 - acidcat acidcat_cms Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direc… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0984 2017-08-17 10:32 2010-03-17 Show GitHub Exploit DB Packet Storm
345574 - chris_simon com_abbrev Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the co… CWE-22
Path Traversal 		CVE-2010-0985 2017-08-17 10:32 2010-03-17 Show GitHub Exploit DB Packet Storm
345575 - chris_wederka tgm_newsletter SQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2010-1024 2017-08-17 10:32 2010-03-20 Show GitHub Exploit DB Packet Storm
345576 - chris_wederka tgm_newsletter Cross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-1025 2017-08-17 10:32 2010-03-20 Show GitHub Exploit DB Packet Storm
345577 - mathon_nicolas tmsw_cleandb SQL injection vulnerability in the CleanDB - DBAL (tmsw_cleandb) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2010-1026 2017-08-17 10:32 2010-03-20 Show GitHub Exploit DB Packet Storm
345578 - dietmar_schffer travelmate SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2010-1027 2017-08-17 10:32 2010-03-20 Show GitHub Exploit DB Packet Storm
345579 - microsoft windows_media_player Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code vi… NVD-CWE-noinfo
CVE-2010-1042 2017-08-17 10:32 2010-03-23 Show GitHub Exploit DB Packet Storm
345580 - manageengine oputils SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter. CWE-89
SQL Injection 		CVE-2010-1044 2017-08-17 10:32 2010-03-23 Show GitHub Exploit DB Packet Storm