Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3341 7.2 重要
Network 		MISP MISP MISPにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44380 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
3342 5.3 警告
Network 		MISP MISP MISPにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-44381 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
3343 6.5 警告
Network 		Frappe ERPNext FrappeのERPNextにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44448 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
3344 7.1 重要
Network 		DataHub project DataHub DataHubにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-44501 2026-05-18 11:25 2026-05-14 Show GitHub Exploit DB Packet Storm
3345 9.1 緊急
Network 		Graham Steffaniak(gtsteffaniak) FileBrowser Quantum Graham Steffaniak(gtsteffaniak)のFileBrowser Quantumにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-44542 2026-05-18 11:25 2026-05-14 Show GitHub Exploit DB Packet Storm
3346 5.9 警告
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける信頼できるデータ受け入れ時の信頼できない無関係なデータの受け入れに関する脆弱性 CWE-349
信頼できるデータ受け入れ時の信頼できない無関係なデータの受け入れ 		CVE-2026-44572 2026-05-18 11:25 2026-05-13 Show GitHub Exploit DB Packet Storm
3347 7.8 重要
Local 		Hayaki Saito (saitoha) libsixel Hayaki Saito (saitoha)のlibsixelにおける複数の脆弱性 CWE-122
CWE-190
CVE-2026-44636 2026-05-18 11:25 2026-05-14 Show GitHub Exploit DB Packet Storm
3348 7.1 重要
Local 		Hayaki Saito (saitoha) libsixel Hayaki Saito (saitoha)のlibsixelにおける複数の脆弱性 CWE-190
CWE-787
CWE-787
CVE-2026-44637 2026-05-18 11:25 2026-05-14 Show GitHub Exploit DB Packet Storm
3349 2.5 低
Local 		Hayaki Saito (saitoha) libsixel Hayaki Saito (saitoha)のlibsixelにおける複数の脆弱性 CWE-476
CWE-476
CWE-690
CVE-2026-44638 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
3350 7.5 重要
Network 		ZITADEL ZITADEL ZITADELにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-44671 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312331 - microsoft outlook Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted… CWE-94
Code Injection 		CVE-2010-0266 2024-11-21 10:11 2010-07-15 Show GitHub Exploit DB Packet Storm
312332 - oracle opensolaris Unspecified vulnerability in Oracle OpenSolaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NVD-CWE-noinfo
CVE-2010-0083 2024-11-21 10:11 2010-07-14 Show GitHub Exploit DB Packet Storm
312333 - oracle fusion_middleware Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a … NVD-CWE-noinfo
CVE-2010-0081 2024-11-21 10:11 2010-07-14 Show GitHub Exploit DB Packet Storm
312334 - mozilla bugzilla Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use_suexec is enabled, uses world-readable permissions for the localconfig files, which allows local users to read sensitive configur… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0180 2024-11-21 10:11 2010-06-29 Show GitHub Exploit DB Packet Storm
312335 - mozilla firefox
seamonkey 		Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a craf… CWE-399
 Resource Management Errors 		CVE-2010-0183 2024-11-21 10:11 2010-06-24 Show GitHub Exploit DB Packet Storm
312336 - novell access_manager Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Ac… CWE-22
Path Traversal 		CVE-2010-0284 2024-11-21 10:11 2010-06-19 Show GitHub Exploit DB Packet Storm
312337 6.5 MEDIUM
Network 		apache qpid-cpp qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use . CWE-20
 Improper Input Validation  		CVE-2009-5004 2024-11-21 10:10 2019-11-9 Show GitHub Exploit DB Packet Storm
312338 6.1 MEDIUM
Network 		pixelpost pixelpost pixelpost 1.7.1 has XSS CWE-79
Cross-site Scripting 		CVE-2009-4900 2024-11-21 10:10 2019-10-29 Show GitHub Exploit DB Packet Storm
312339 9.8 CRITICAL
Network 		pixelpost pixelpost pixelpost 1.7.1 has SQL injection CWE-89
SQL Injection 		CVE-2009-4899 2024-11-21 10:10 2019-10-29 Show GitHub Exploit DB Packet Storm
312340 - justsystems just_smile
atok
atok_flat-rate_service 		Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the sc… NVD-CWE-noinfo
CVE-2009-4738 2024-11-21 10:10 2013-01-19 Show GitHub Exploit DB Packet Storm