Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4111 7.1 重要
Network 		Quantum Nous New API Quantum NousのNew APIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42339 2026-05-20 13:30 2026-05-8 Show GitHub Exploit DB Packet Storm
4112 9.8 緊急
Network 		sentry sentry sentryにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-42354 2026-05-20 13:30 2026-05-8 Show GitHub Exploit DB Packet Storm
4113 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-42355 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
4114 5.1 警告
Local 		uriparser project uriparser uriparser projectのuriparserにおける数値打ち切り誤差に関する脆弱性 CWE-197
数値打ち切り誤差 		CVE-2026-42371 2026-05-20 13:30 2026-04-27 Show GitHub Exploit DB Packet Storm
4115 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42442 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
4116 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2026-42443 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
4117 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42444 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
4118 4.3 警告
Network 		mintplexlabs anythingllm mintplexlabsのanythingllmにおける複数の脆弱性 CWE-200
CWE-639
CWE-639
CVE-2026-42456 2026-05-20 13:30 2026-05-8 Show GitHub Exploit DB Packet Storm
4119 6.1 警告
Network 		Gofiber Fiber GofiberのFiberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42554 2026-05-20 13:29 2026-05-11 Show GitHub Exploit DB Packet Storm
4120 9 緊急
Network 		Gitroom Postiz GitroomのPostizにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42556 2026-05-20 13:29 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312371 - splunk splunk Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to mo… CWE-22
Path Traversal 		CVE-2010-2502 2024-11-21 10:16 2010-06-29 Show GitHub Exploit DB Packet Storm
312372 - mozilla bugzilla Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is enabled, uses world-readable permissions within (1) .bzr/ and (2) data/webdot/, which allows local user… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2470 2024-11-21 10:16 2010-06-29 Show GitHub Exploit DB Packet Storm
312373 - moodle moodle Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of… CWE-352
 Origin Validation Error 		CVE-2010-2231 2024-11-21 10:16 2010-06-29 Show GitHub Exploit DB Packet Storm
312374 - moodle moodle The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site sc… CWE-79
Cross-site Scripting 		CVE-2010-2230 2024-11-21 10:16 2010-06-29 Show GitHub Exploit DB Packet Storm
312375 - moodle moodle Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow remote attackers to inject arbitrary web script or HTML via unspecified para… CWE-79
Cross-site Scripting 		CVE-2010-2229 2024-11-21 10:16 2010-06-29 Show GitHub Exploit DB Packet Storm
312376 - moodle moodle Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors… CWE-79
Cross-site Scripting 		CVE-2010-2228 2024-11-21 10:16 2010-06-29 Show GitHub Exploit DB Packet Storm
312377 - linearcorp emerge_50
emerge_5000 		The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the de… CWE-255
Credentials Management 		CVE-2010-2469 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm
312378 - s2sys
linearcorp
sonitrol 		netbox
emerge_50
emerge_5000
eaccess 		The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for con… CWE-310
Cryptographic Issues 		CVE-2010-2468 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm
312379 - s2sys
linearcorp
sonitrol 		netbox
emerge_50
emerge_5000
eaccess 		The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, w… CWE-255
Credentials Management 		CVE-2010-2467 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm
312380 - s2sys
linearcorp
sonitrol 		netbox
emerge_50
emerge_5000
eaccess 		The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not properly prevent downloading of database backups, which allows remote attacke… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2466 2024-11-21 10:16 2010-06-26 Show GitHub Exploit DB Packet Storm