Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3061	6.5	警告 Network	Fleet Device Management	fleet	Fleet Device Managementのfleetにおける入力確認に関する脆弱性	CWE-20 CWE-noinfo	CVE-2026-26062	2026-05-20 13:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

3062	9.8	緊急 Network	Fleet Device Management	fleet	Fleet Device ManagementのfleetにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26191	2026-05-20 13:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

3063	8.6	重要 Network	lfprojects	mlflow	lfprojectsのmlflowにおける根本の脆弱性による認証回避の脆弱性	CWE-305 根本の脆弱性による認証回避	CVE-2026-2652	2026-05-20 13:21	2026-05-15	Show	GitHub Exploit DB Packet Storm

3064	9.1	緊急 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品における余分なパラメータの不適切な処理に関する脆弱性	CWE-235 余分なパラメータの不適切な処理	CVE-2026-27851	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

3065	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28759	2026-05-20 13:21	2026-05-18	Show	GitHub Exploit DB Packet Storm

3066	5.5	警告 Local	マイクロソフト	Microsoft Teams	Microsoft Teams のなりすましの脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-32185	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

3067	7.2	重要 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33518	2026-05-20 13:21	2026-04-21	Show	GitHub Exploit DB Packet Storm

3068	9.8	緊急 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33519	2026-05-20 13:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

3069	5.3	警告 Adjacent	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるリソースの挿入に関する脆弱性	CWE-99 リソースの挿入	CVE-2026-33603	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

3070	6.1	警告 Network	シーメンス	teamcenter	シーメンスのteamcenterにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33862	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311921	-	phpcityportal	phpcityportal	Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.	CWE-79 Cross-site Scripting	CVE-2010-2318	2024-11-21 10:16	2010-06-18	Show	GitHub Exploit DB Packet Storm

311922	-	wmsdesign	wmscms	Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to…	CWE-89 SQL Injection	CVE-2010-2317	2024-11-21 10:16	2010-06-18	Show	GitHub Exploit DB Packet Storm

311923	-	wmsdesign	wmscms	Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) …	CWE-79 Cross-site Scripting	CVE-2010-2316	2024-11-21 10:16	2010-06-18	Show	GitHub Exploit DB Packet Storm

311924	-	smartisoft	phpbazar	PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter.	CWE-94 Code Injection	CVE-2010-2315	2024-11-21 10:16	2010-06-18	Show	GitHub Exploit DB Packet Storm

311925	-	edmondhui.homeip	np_twitter	PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucleus, when register_globals is enabled, allows remote attackers to execute arbitr…	CWE-94 Code Injection	CVE-2010-2314	2024-11-21 10:16	2010-06-18	Show	GitHub Exploit DB Packet Storm

311926	-	anodyne-productions	simm_management_system	Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. …	CWE-22 Path Traversal	CVE-2010-2313	2024-11-21 10:16	2010-06-18	Show	GitHub Exploit DB Packet Storm

311927	-	hauntmax	haunted_house_directory_listing_cms	SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action.	CWE-89 SQL Injection	CVE-2010-2312	2024-11-21 10:16	2010-06-17	Show	GitHub Exploit DB Packet Storm

311928	-	power-tab	power_tab_editor	Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file with a long font name.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2311	2024-11-21 10:16	2010-06-17	Show	GitHub Exploit DB Packet Storm

311929	-	solarwinds	tftp_server	SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.	CWE-20 Improper Input Validation	CVE-2010-2310	2024-11-21 10:16	2010-06-17	Show	GitHub Exploit DB Packet Storm

311930	-	evological	evocam	Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET request.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2309	2024-11-21 10:16	2010-06-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed