Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4131	6.7	警告 Local	デル	data domain operating system	デルのdata domain operating systemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35073	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4132	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35074	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4133	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-35153	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

4134	8.8	重要 Network	Project Jupyter	Jupyter Server	Project JupyterのJupyter Serverにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35397	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4135	9.6	緊急 Network	マイクロソフト	Azure Cloud Shell	Azure Cloud Shell Spoofing Vulnerability	CWE-77 コマンドインジェクション	CVE-2026-35428	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4136	10	緊急 Network	マイクロソフト	Azure AI Foundry	Azure AI Foundry の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35435	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4137	9.8	緊急 Network	coredns.io	CoreDNS	The CoreDNS AuthorsのCoreDNSにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-35579	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4138	9.8	緊急 Network	Kestra	Kestra	KestraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-38428	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4139	7.2	重要 Network	Gotenberg, Inc.	Gotenberg	TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-39383	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4140	8.8	重要 Network	Apache Software Foundation	Apache NiFi	Apache Software FoundationのApache NiFiにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-39816	2026-05-11 11:10	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346921	-	wikyblog	wikyblog	Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using the …	NVD-CWE-Other	CVE-2010-0757	2017-08-17 10:32	2010-02-27	Show	GitHub Exploit DB Packet Storm

346922	-	wikyblog	wikyblog	Per: http://cwe.mitre.org/data/definitions/434.html CWE-434: Unrestricted Upload of File with Dangerous Type	NVD-CWE-Other	CVE-2010-0757	2017-08-17 10:32	2010-02-27	Show	GitHub Exploit DB Packet Storm

346923	-	softbizscripts	softbiz_jobs_and_recruitment_script	SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-0758	2017-08-17 10:32	2010-02-27	Show	GitHub Exploit DB Packet Storm

346924	-	greatjoomla	scriptegrator_plugin	Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and …	CWE-22 Path Traversal	CVE-2010-0759	2017-08-17 10:32	2010-02-27	Show	GitHub Exploit DB Packet Storm

346925	-	kuwaitphp	esmile	SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action.	CWE-89 SQL Injection	CVE-2010-0764	2017-08-17 10:32	2010-03-3	Show	GitHub Exploit DB Packet Storm

346926	-	fipsasp	fipsforum	fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for _database/forumFips.mdb.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0765	2017-08-17 10:32	2010-03-3	Show	GitHub Exploit DB Packet Storm

346927	-	ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attacke…	CWE-79 Cross-site Scripting	CVE-2010-0768	2017-08-17 10:32	2010-04-2	Show	GitHub Exploit DB Packet Storm

346928	-	ibm	websphere_application_server	IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local use…	CWE-255 Credentials Management	CVE-2010-0769	2017-08-17 10:32	2010-04-2	Show	GitHub Exploit DB Packet Storm

346929	-	ibm	websphere_application_server	IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service (ORB ListenerThread hang) by abo…	CWE-399 Resource Management Errors	CVE-2010-0770	2017-08-17 10:32	2010-04-2	Show	GitHub Exploit DB Packet Storm

346930	-	ibm	websphere_mq	Unspecified vulnerability in the channel process in IBM WebSphere MQ 7.0 before 7.0.1.2 allows remote authenticated users to cause a denial of service (daemon crash) via "incorrect channel control da…	NVD-CWE-noinfo	CVE-2010-0772	2017-08-17 10:32	2010-04-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed