Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3551 7.8 重要
Local 		Amazon.com, Inc. Kiro IDE Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-0830 2026-04-30 12:08 2026-01-9 Show GitHub Exploit DB Packet Storm
3552 5.4 警告
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-25720 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3553 9.8 緊急
Network 		huggingface LeRobot huggingfaceのLeRobotにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-25874 2026-04-30 12:08 2026-04-23 Show GitHub Exploit DB Packet Storm
3554 8.1 重要
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-27841 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3555 9.1 緊急
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-27843 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3556 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-33524 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3557 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-33666 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3558 7.5 重要
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35064 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3559 7.1 重要
Local 		Gwenhael Goavec-Merou (trabucayre) openFPGALoader Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-35170 2026-04-30 12:08 2026-04-6 Show GitHub Exploit DB Packet Storm
3560 7.1 重要
Local 		Gwenhael Goavec-Merou (trabucayre) openFPGALoader Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-35176 2026-04-30 12:08 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349691 - mojoblog mojoblog Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path paramete… CWE-94
Code Injection 		CVE-2009-4789 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
349692 - mojoblog mojoblog Per http://extensions.joomla.org/extensions/3374/details: Editor's note This extension has been unpublished for the following reason: * This extension is not compatible with Joomla! 1.5 CWE-94
Code Injection 		CVE-2009-4789 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
349693 - sysax multi_server Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. NOTE: the provenance of this infor… CWE-22
Path Traversal 		CVE-2009-4790 2010-06-3 13:00 2010-04-22 Show GitHub Exploit DB Packet Storm
349694 - amsn amsn login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation. CWE-255
Credentials Management 		CVE-2008-7255 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
349695 - lispeltuut com_archeryscores Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a… CWE-22
Path Traversal 		CVE-2010-1718 2010-06-1 13:00 2010-05-5 Show GitHub Exploit DB Packet Storm
349696 - freebsd freebsd jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read,… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2022 2010-06-1 13:00 2010-05-29 Show GitHub Exploit DB Packet Storm
349697 - intervations filecopa Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this informatio… CWE-22
Path Traversal 		CVE-2010-2112 2010-06-1 13:00 2010-05-29 Show GitHub Exploit DB Packet Storm
349698 - brekeke pbx Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.we… CWE-352
 Origin Validation Error 		CVE-2010-2114 2010-06-1 13:00 2010-05-29 Show GitHub Exploit DB Packet Storm
349699 - solarwinds tftp_server SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. CWE-20
 Improper Input Validation  		CVE-2010-2115 2010-06-1 13:00 2010-05-29 Show GitHub Exploit DB Packet Storm
349700 - hp mercury_testdirector_for_quality_center Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors. NVD-CWE-noinfo
CVE-2010-1959 2010-05-29 14:47 2010-05-28 Show GitHub Exploit DB Packet Storm