Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252061	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5057	2011-11-25 10:13	2011-11-23	Show	GitHub Exploit DB Packet Storm

252062	7.5	危険	IXXO Internet Solutions	-	XOBBIX コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5053	2011-11-25 10:08	2011-11-23	Show	GitHub Exploit DB Packet Storm

252063	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

252064	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

252065	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1516	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

252066	7.6	危険	アップル	-	Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7303	2011-11-24 16:27	2011-11-15	Show	GitHub Exploit DB Packet Storm

252067	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1452	2011-11-24 11:00	2010-07-25	Show	GitHub Exploit DB Packet Storm

252068	10	危険	トレンドマイクロ IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ターボリナックスオラクルレッドハット	-	APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2412	2011-11-24 10:57	2009-08-6	Show	GitHub Exploit DB Packet Storm

252069	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache httpd の mod_deflate モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1891	2011-11-24 10:54	2009-07-10	Show	GitHub Exploit DB Packet Storm

252070	4.3	警告	IBM	-	IBM Lotus Mobile Connect におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4465	2011-11-22 16:26	2011-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3401	5.2	MEDIUM Local	-	-	There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traver…	CWE-269 Improper Privilege Management	CVE-2026-40001	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

3402	6.3	MEDIUM Local	-	-	A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hard…	CWE-1241 Use of Predictable Algorithm in Random Number Generator	CVE-2026-6420	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

3403	6.8	MEDIUM Network	-	-	Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the lowest authenticated role, hold…	CWE-863 Incorrect Authorization	CVE-2026-6863	2026-05-7 23:56	2026-05-7	Show	GitHub Exploit DB Packet Storm

3404	6.8	MEDIUM Network	-	-	Admidio is an open-source user management solution. Prior to version 5.0.9, the OIDC token introspection endpoint (/modules/sso/index.php/oidc/introspect) always returns {"active": true} for every re…	CWE-287 Improper Authentication	CVE-2026-41671	2026-05-7 23:54	2026-05-7	Show	GitHub Exploit DB Packet Storm

3405	-		-	-	A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the w…	CWE-88 Argument Injection	CVE-2026-7865	2026-05-7 23:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

3406	9.1	CRITICAL Network	-	-	Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the value of the UNIQUE_…	CWE-340 Generation of Predictable Numbers or Identifiers	CVE-2026-5081	2026-05-7 23:52	2026-05-6	Show	GitHub Exploit DB Packet Storm

3407	7.5	HIGH Network	-	-	A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive …	-	CVE-2026-23870	2026-05-7 23:52	2026-05-7	Show	GitHub Exploit DB Packet Storm

3408	6.5	MEDIUM Network	-	-	RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x…	CWE-295 Improper Certificate Validation	CVE-2025-42611	2026-05-7 23:51	2026-05-5	Show	GitHub Exploit DB Packet Storm

3409	-		-	-	An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user to alter or delete arbitrary data…	CWE-20 CWE-352 CWE-917 Improper Input Validation Origin Validation Error Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-28201	2026-05-7 23:51	2026-05-7	Show	GitHub Exploit DB Packet Storm

3410	-		-	-	Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (S…	CWE-20 Improper Input Validation	CVE-2026-33587	2026-05-7 23:51	2026-05-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed