Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2921 7.8 重要
Local 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-37526 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
2922 9.8 緊急
Network 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおける複数の脆弱性 CWE-22
CWE-367
CVE-2026-37531 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
2923 6.5 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40016 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
2924 4.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-40020 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
2925 7.8 重要
Local 		マイクロソフト Azure Connected Machine Agent Azure Connected Machine Agent の特権の昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-40381 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
2926 9.8 緊急
Network 		エレコム株式会社 WRC-XE5400GS-G
WRC-BE72XSD-B
WAB-BE72-M
WRC-X1800GS-B
WRC-BE65QSD-B
WRC-X6000QSA-G
WRC-X3000GS2A-B
WRC-W702-B
WRC-X6000XS-G
WAB-BE36-M
WRC-X6000XST-G
WRC-X3000GS2-B 		エレコム製無線LANルーターおよび無線アクセスポイントにおける複数の脆弱性（2026年5月） CWE-78
CWE-79
CWE-Other
CVE-2026-25107
CVE-2026-35506
CVE-2026-40621
CVE-2026-42062
CVE-2026-42948
CVE-2026-42950
CVE-2026-42961 		2026-05-19 17:24 2026-05-12 Show GitHub Exploit DB Packet Storm
2927 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月14日） - - 2026-05-18 14:06 2026-05-15 Show GitHub Exploit DB Packet Storm
2928 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71297 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
2929 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71298 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
2930 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71299 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311911 - wmsdesign wmscms Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) … CWE-79
Cross-site Scripting 		CVE-2010-2316 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311912 - smartisoft phpbazar PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter. CWE-94
Code Injection 		CVE-2010-2315 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311913 - edmondhui.homeip np_twitter PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucleus, when register_globals is enabled, allows remote attackers to execute arbitr… CWE-94
Code Injection 		CVE-2010-2314 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311914 - anodyne-productions simm_management_system Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. … CWE-22
Path Traversal 		CVE-2010-2313 2024-11-21 10:16 2010-06-18 Show GitHub Exploit DB Packet Storm
311915 - hauntmax haunted_house_directory_listing_cms SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action. CWE-89
SQL Injection 		CVE-2010-2312 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311916 - power-tab power_tab_editor Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file with a long font name. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2311 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311917 - solarwinds tftp_server SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request. CWE-20
 Improper Input Validation  		CVE-2010-2310 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311918 - evological evocam Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET request. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-2309 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311919 - sophos anti-virus Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile func… NVD-CWE-noinfo
CVE-2010-2308 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm
311920 - motorola surfboard_sbv6120e Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files … CWE-22
Path Traversal 		CVE-2010-2307 2024-11-21 10:16 2010-06-17 Show GitHub Exploit DB Packet Storm