Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
291	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数オーバーフローの脆弱性 New	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-34711	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

292	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性 New	CWE-20 不適切な入力確認	CVE-2026-34712	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

293	7.5	重要 Network	アドビシステムズ	C2PA (Coalition for Content Provenance and Authenticity) (Content Authenticity Initiative) c2pa-web	アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性 New	CWE-400 リソースの枯渇	CVE-2026-34713	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

294	5	警告 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおける二重解放に関する脆弱性 New	CWE-415 二重解放	CVE-2026-35188	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

295	5.4	警告 Network	VMware	VMware Telco Cloud Platform VMware Aria Operations VMware Cloud Foundation	VMwareのVMware Aria Operations等の複数製品におけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-41724	2026-06-16 13:38	2026-06-8	Show	GitHub Exploit DB Packet Storm

296	5.3	警告 Network	VMware	Spring Framework	VMwareのSpring FrameworkにおけるHTTP リクエストスマグリングに関する脆弱性 New	CWE-444 HTTP リクエストスマグリング	CVE-2026-41853	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

297	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるサーバサイドのリクエストフォージェリの脆弱性 New	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41854	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

298	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-42764	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

299	7.5	重要 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-42765	2026-06-16 13:38	2026-06-9	Show	GitHub Exploit DB Packet Storm

300	5.9	警告 Network	OpenSSL Project	OpenSSL	OpenSSL ProjectのOpenSSLにおけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-42766	2026-06-16 13:37	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
309961	-	gambio	xt\	SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.	CWE-89 SQL Injection	CVE-2010-4954	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309962	-	jw_calendar	jw_calendar	Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.	NVD-CWE-noinfo	CVE-2010-4953	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309963	-	joachim_ruhs	festat	SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-4952	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309964	-	thomas_mammitzsch	vx_xajax_shoutbox	Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vect…	CWE-79 Cross-site Scripting	CVE-2010-4951	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309965	-	joachim_ruhs	event	SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-4950	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309966	-	evnix	freichat freichatpure	Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary…	CWE-79 Cross-site Scripting	CVE-2010-4949	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309967	-	phpgalleryscript	php_free_photo_gallery	PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.	CWE-94 Code Injection	CVE-2010-4948	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309968	-	allpcscript	allpc	Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.	CWE-79 Cross-site Scripting	CVE-2010-4947	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309969	-	allpcscript	allpc	SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.	CWE-89 SQL Injection	CVE-2010-4946	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

309970	-	joomla	com_camelcitydb2	SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.	CWE-89 SQL Injection	CVE-2010-4945	2024-11-21 10:22	2011-10-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed