Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3121	7.5	重要 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33594	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

3122	7.5	重要 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33595	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

3123	6.5	警告 Adjacent	PowerDNS	dnsdist	PowerDNSのdnsdistにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33596	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

3124	7.5	重要 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおけるエンコードおよびエスケープに関する脆弱性	CWE-116 不適切なエンコード、または出力のエスケープ	CVE-2026-33597	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

3125	9.1	緊急 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33598	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

3126	8.1	重要 Adjacent	PowerDNS	dnsdist	PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33599	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

3127	8.2	重要 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-33602	2026-04-27 10:50	2026-04-22	Show	GitHub Exploit DB Packet Storm

3128	10	緊急 Network	Flatpak	Flatpak	FlatpakにおけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-34078	2026-04-27 10:50	2026-04-7	Show	GitHub Exploit DB Packet Storm

3129	9.1	緊急 Network		-	オラクルのEnterprise Manager Base Platformにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34279	2026-04-27 10:50	2026-04-21	Show	GitHub Exploit DB Packet Storm

3130	4.7	警告 Network	オラクル	Oracle Applications Framework	オラクルのOracle Applications Frameworkにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34298	2026-04-27 10:50	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348411	-	openx	openx	Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/in…	NVD-CWE-noinfo CWE-287 Improper Authentication	CVE-2009-4830	2010-07-30 13:00	2010-04-28	Show	GitHub Exploit DB Packet Storm

348412	-	cisco	ios	Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service (device reload) via crafted Skinny Client Control Pro…	NVD-CWE-noinfo	CVE-2010-0584	2010-07-13 14:50	2010-03-26	Show	GitHub Exploit DB Packet Storm

348413	-	frank-karau	phpfk_php_forum	Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of …	CWE-79 Cross-site Scripting	CVE-2009-4677	2010-07-13 14:48	2010-03-9	Show	GitHub Exploit DB Packet Storm

348414	-	gnome	screensaver	gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to ac…	NVD-CWE-Other	CVE-2009-4641	2010-07-7 13:00	2010-02-12	Show	GitHub Exploit DB Packet Storm

348415	-	tim_lochmueller	mydashboard	Cross-site scripting (XSS) vulnerability in the myDashboard (mydashboard) extension 0.1.13 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-1011	2010-06-25 13:00	2010-03-20	Show	GitHub Exploit DB Packet Storm

348416	-	fr.simon_rundell	pd_diocesedatabase	SQL injection vulnerability in the Diocese of Portsmouth Database (pd_diocesedatabase) extension before 0.7.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vect…	CWE-89 SQL Injection	CVE-2010-1013	2010-06-25 13:00	2010-03-20	Show	GitHub Exploit DB Packet Storm

348417	-	laurent_foulloy	sav_filter_abc	SQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2010-1015	2010-06-24 13:00	2010-03-20	Show	GitHub Exploit DB Packet Storm

348418	-	enanocms	enanocms	SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameter…	CWE-89 SQL Injection	CVE-2010-0471	2010-06-23 13:00	2010-02-3	Show	GitHub Exploit DB Packet Storm

348419	-	opencart	opencart	SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.	CWE-89 SQL Injection	CVE-2010-0956	2010-06-23 13:00	2010-03-11	Show	GitHub Exploit DB Packet Storm

348420	-	apple	safari	Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie Miller during a Pwn2Own competition at C…	CWE-94 Code Injection	CVE-2010-1120	2010-06-23 13:00	2010-03-26	Show	GitHub Exploit DB Packet Storm