Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
261	5.5	警告 Local	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft Windows 11 26h1 Microsoft Windows 10 21h2 Microsoft …	Windows DHCP クライアントの情報漏えいの脆弱性 New	CWE-125 境界外読み取り	CVE-2026-45634	2026-06-15 11:17	2026-06-9	Show	GitHub Exploit DB Packet Storm

262	7.5	重要 Network	sqlfluff	sqlfluff	sqlfluffにおける再帰制御に関する脆弱性 New	CWE-674 不適切な再帰制御	CVE-2026-46373	2026-06-15 11:17	2026-06-9	Show	GitHub Exploit DB Packet Storm

263	7.5	重要 Network	sqlfluff	sqlfluff	sqlfluffにおけるリソースの枯渇に関する脆弱性 New	CWE-400 リソースの枯渇	CVE-2026-46374	2026-06-15 11:17	2026-06-9	Show	GitHub Exploit DB Packet Storm

264	8.8	重要 Network	flowiseai	flowise	flowiseaiのflowiseにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 New	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-46475	2026-06-15 11:17	2026-06-8	Show	GitHub Exploit DB Packet Storm

265	4.6	警告 Network	Umbraco	Umbraco CMS	UmbracoのUmbraco CMSにおけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-46609	2026-06-15 11:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

266	6.1	警告 Network	Umbraco	Umbraco CMS	UmbracoのUmbraco CMSにおけるオープンリダイレクトの脆弱性 New	CWE-601 オープンリダイレクト	CVE-2026-46616	2026-06-15 11:17	2026-06-10	Show	GitHub Exploit DB Packet Storm

267	8.8	重要 Network	シーメンス	SINEC INS	シーメンスのSINEC INSにおけるOS コマンドインジェクションの脆弱性 New	CWE-78 OSコマンド・インジェクション	CVE-2026-46746	2026-06-15 11:17	2026-06-9	Show	GitHub Exploit DB Packet Storm

268	5.3	警告 Network	シーメンス	SINEC INS	シーメンスのSINEC INSにおけるパストラバーサルの脆弱性 New	CWE-26 パストラバーサル (/dir/../filename)	CVE-2026-46747	2026-06-15 11:17	2026-06-9	Show	GitHub Exploit DB Packet Storm

269	7.8	重要 Local	シーメンス	SINEC INS	シーメンスのSINEC INSにおける不要な特権による実行に関する脆弱性 New	CWE-250 不要な特権による実行	CVE-2026-46748	2026-06-15 11:16	2026-06-9	Show	GitHub Exploit DB Packet Storm

270	9.8	緊急 Network	シーメンス	SINEC INS	シーメンスのSINEC INSにおける予測可能な Salt の一方向ハッシュの使用に関する脆弱性 New	CWE-760 予測可能な Salt の一方向ハッシュの使用	CVE-2026-46749	2026-06-15 11:16	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310011	-	simon_philips	com_aardvertiser	SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view a…	CWE-89 SQL Injection	CVE-2010-4904	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310012	-	cubecart	cubecart	SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.	CWE-89 SQL Injection	CVE-2010-4903	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310013	-	joomla-clantools	clantools	Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame paramete…	CWE-89 SQL Injection	CVE-2010-4902	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310014	-	squiz	mysource_matrix	Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter.	CWE-79 Cross-site Scripting	CVE-2010-4901	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310015	-	webmanager-pro	cms_webmanager-pro	Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.	CWE-20 Improper Input Validation	CVE-2010-4900	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310016	-	webmanager-pro	cms_webmanager-pro	SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-4899	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310017	-	gantry-framework	com_gantry	SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php.	CWE-89 SQL Injection	CVE-2010-4898	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310018	-	bluecms_project	bluecms	SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.	CWE-89 SQL Injection	CVE-2010-4897	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310019	-	expinion.net	member_management_system	Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REF_URL parameter.	CWE-79 Cross-site Scripting	CVE-2010-4896	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310020	-	chillycms	chillycms	Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE:…	CWE-79 Cross-site Scripting	CVE-2010-4895	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed