Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
271	6.5	警告 Network	レッドハット	389 Directory Server Red Hat Directory Server Red Hat Enterprise Linux	レッドハットの389 Directory Server等の複数製品におけるリソースの枯渇に関する脆弱性 New	CWE-400 リソースの枯渇	CVE-2026-11611	2026-06-16 13:39	2026-06-8	Show	GitHub Exploit DB Packet Storm

272	4.9	警告 Network	レッドハット	389 Directory Server	レッドハットの389 Directory Serverにおけるスタックベースのバッファオーバーフローの脆弱性 New	CWE-121 スタックオーバーフロー	CVE-2026-11793	2026-06-16 13:39	2026-06-9	Show	GitHub Exploit DB Packet Storm

273	6.5	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-12026	2026-06-16 13:39	2026-06-11	Show	GitHub Exploit DB Packet Storm

274	8.8	重要 Network	Splunk	Splunk Splunk Secure Gateway splunk cloud platform	SplunkのSplunk等の複数製品における信頼できないデータのデシリアライゼーションに関する脆弱性 New	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-20251	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

275	7.6	重要 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 New	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-20252	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

276	9.8	緊急 Network	Splunk	Splunk	Splunkにおける重要な機能に対する認証の欠如に関する脆弱性 New	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-20253	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

277	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20254	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

278	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20255	2026-06-16 13:39	2026-06-10	Show	GitHub Exploit DB Packet Storm

279	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20256	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

280	5.7	警告 Network	Splunk	Splunk splunk cloud platform	SplunkのSplunk等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-20257	2026-06-16 13:38	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
309961	-	gambio	xt\	SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.	CWE-89 SQL Injection	CVE-2010-4954	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309962	-	jw_calendar	jw_calendar	Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.	NVD-CWE-noinfo	CVE-2010-4953	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309963	-	joachim_ruhs	festat	SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-4952	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309964	-	thomas_mammitzsch	vx_xajax_shoutbox	Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vect…	CWE-79 Cross-site Scripting	CVE-2010-4951	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309965	-	joachim_ruhs	event	SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-4950	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309966	-	evnix	freichat freichatpure	Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary…	CWE-79 Cross-site Scripting	CVE-2010-4949	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309967	-	phpgalleryscript	php_free_photo_gallery	PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.	CWE-94 Code Injection	CVE-2010-4948	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309968	-	allpcscript	allpc	Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.	CWE-79 Cross-site Scripting	CVE-2010-4947	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309969	-	allpcscript	allpc	SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.	CWE-89 SQL Injection	CVE-2010-4946	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309970	-	joomla	com_camelcitydb2	SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.	CWE-89 SQL Injection	CVE-2010-4945	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm