Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254661 10 危険 IBM - IBM Rational ClearQuest における .ocx ファイルに関する処理に不備がある脆弱性 CWE-noinfo
情報不足 		CVE-2010-4601 2012-03-27 18:42 2009-11-2 Show GitHub Exploit DB Packet Storm
254662 4.3 警告 Mozilla Foundation - Bugzilla の chart.cgi における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4572 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
254663 4.3 警告 Mozilla Foundation - Bugzilla の duplicate-detection 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4570 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
254664 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4569 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
254665 7.5 危険 Mozilla Foundation - Bugzilla における任意のアカウントにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4568 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
254666 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4567 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
254667 4.3 警告 SquirrelMail Project - SquirrelMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4555 2012-03-27 18:42 2011-07-11 Show GitHub Exploit DB Packet Storm
254668 4.3 警告 SquirrelMail Project - SquirrelMail の functions/page_header.php におけるクリックジャック攻撃を誘発する脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4554 2012-03-27 18:42 2011-07-12 Show GitHub Exploit DB Packet Storm
254669 9.3 危険 Opera Software ASA - Opera における詳細不明の脆弱性 CWE-DesignError
CVE-2010-4587 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
254670 10 危険 Opera Software ASA - Opera のデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2010-4586 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 6.5 MEDIUM
Network 		- - Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-56013 2026-06-30 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
232 7.5 HIGH
Network 		- - Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions. New CWE-862
 Missing Authorization 		CVE-2026-54844 2026-06-30 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
233 7.5 HIGH
Network 		- - Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. New CWE-862
 Missing Authorization 		CVE-2026-54835 2026-06-30 03:16 2026-06-27 Show GitHub Exploit DB Packet Storm
234 7.5 HIGH
Network 		- - Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions. New CWE-862
 Missing Authorization 		CVE-2026-54830 2026-06-30 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
235 7.6 HIGH
Network 		- - Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-54826 2026-06-30 03:16 2026-06-27 Show GitHub Exploit DB Packet Storm
236 - - - Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem. New - CVE-2026-36848 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
237 7.5 HIGH
Network 		- - Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions. New CWE-862
 Missing Authorization 		CVE-2026-27366 2026-06-30 03:16 2026-06-25 Show GitHub Exploit DB Packet Storm
238 6.0 MEDIUM
Local 		- - Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths,… New CWE-89
SQL Injection 		CVE-2026-13752 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
239 4.1 MEDIUM
Local 		- - Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reader's !source/!load directives could reference remot… New CWE-829
CWE-918
 Inclusion of Functionality from Untrusted Control Sphere
Server-Side Request Forgery (SSRF)  		CVE-2026-13751 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm
240 - - - A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into t… New CWE-22
Path Traversal 		CVE-2026-11720 2026-06-30 03:16 2026-06-30 Show GitHub Exploit DB Packet Storm