Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3601	9.8	緊急 Network	Frappe	ERPNext	FrappeのERPNextにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-38431	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3602	6.1	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-38432	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3603	9.1	緊急 Network	CHORNY	Apache::Session	CHORNYのApache::Sessionにおける有効期限後または解放後のリソースの操作に関する脆弱性	CWE-672 有効期限後または解放後のリソースの操作	CVE-2013-10075	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

3604	9.8	緊急 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおける複数の脆弱性	CWE-502 CWE-918	CVE-2026-34084	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3605	5.4	警告 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-35453	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3606	9.1	緊急 Network	Zcash Foundation	Zebra-script Zebrad	Zcash FoundationのZebra-script等の複数製品における呼び出し元による仕様の不適切な準拠に関する脆弱性	CWE-573 呼び出し元による仕様の不適切な準拠	CVE-2026-41583	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

3607	6.5	警告 Network	Zcash Foundation	zebra-rpc Zebrad	Zcash Foundationのzebra-rpc等の複数製品における複数の脆弱性	CWE-248 CWE-617	CVE-2026-41585	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

3608	9.1	緊急 Network	Zcash Foundation	Zebra-script Zebrad	Zcash FoundationのZebra-script等の複数製品におけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-44497	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

3609	5.3	警告 Network	Apache Software Foundation	CloudStack	Apache Software FoundationのCloudStackにおける複数の脆弱性	CWE-367 CWE-770	CVE-2025-69233	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

3610	8.4	重要 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品における弱い認証情報の使用に関する脆弱性	CWE-1391 脆弱な認証情報の使用	CVE-2026-23853	2026-05-11 11:12	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346311	-	ternaria	com_preventive	Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impa…	CWE-22 Path Traversal	CVE-2010-1475	2017-08-17 10:32	2010-04-20	Show	GitHub Exploit DB Packet Storm

346312	-	ibm	cognos_8_business_intelligence	Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2010-1490	2017-08-17 10:32	2010-04-21	Show	GitHub Exploit DB Packet Storm

346313	-	awdsolution	com_awdwall	SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cbuser parameter in an awdwall action to …	CWE-89 SQL Injection	CVE-2010-1493	2017-08-17 10:32	2010-04-23	Show	GitHub Exploit DB Packet Storm

346314	-	awdsolution	com_awdwall	Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.	CWE-22 Path Traversal	CVE-2010-1494	2017-08-17 10:32	2010-04-23	Show	GitHub Exploit DB Packet Storm

346315	-	jolt	com_joltcard	SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cardID parameter in a view action to index.php.	CWE-89 SQL Injection	CVE-2010-1496	2017-08-17 10:32	2010-04-23	Show	GitHub Exploit DB Packet Storm

346316	-	clausvb	dl_stats	Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.	CWE-79 Cross-site Scripting	CVE-2010-1497	2017-08-17 10:32	2010-04-23	Show	GitHub Exploit DB Packet Storm

346317	-	clausvb	dl_stats	Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) download.php and (2) view_file.php.	CWE-89 SQL Injection	CVE-2010-1498	2017-08-17 10:32	2010-04-23	Show	GitHub Exploit DB Packet Storm

346318	-	musicboxv2	musicbox	SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-1499	2017-08-17 10:32	2010-04-23	Show	GitHub Exploit DB Packet Storm

346319	-	uiga	proxy	PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content paramet…	CWE-94 Code Injection	CVE-2010-1528	2017-08-17 10:32	2010-04-27	Show	GitHub Exploit DB Packet Storm

346320	-	freestyle	faqs_lite	SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq actio…	CWE-89 SQL Injection	CVE-2010-1529	2017-08-17 10:32	2010-04-27	Show	GitHub Exploit DB Packet Storm