Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4491 8 重要
Adjacent
TP-LINK Technologies Archer AXE75 Firmware TP-LINK TechnologiesのArcher AXE75 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-15568 2026-05-8 12:09 2026-03-9 Show GitHub Exploit DB Packet Storm
4492 6.5 警告
Network
HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2025-31982 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
4493 4.6 警告
Network
HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック
CVE-2025-31983 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
4494 6.1 警告
Network
phppointofsale php point of sale phppointofsaleのphp point of saleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-41011 2026-05-8 12:09 2026-04-21 Show GitHub Exploit DB Packet Storm
4495 4.3 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2025-59809 2026-05-8 12:09 2026-04-14 Show GitHub Exploit DB Packet Storm
4496 5.4 警告
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-20945 2026-05-8 12:09 2026-04-14 Show GitHub Exploit DB Packet Storm
4497 6.5 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信
CVE-2026-21742 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
4498 5.4 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-22154 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
4499 7.5 重要
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信
CVE-2026-22155 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
4500 6.5 警告
Network
フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-22573 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355141 - thomas_perez tribisur Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via d… CWE-22
Path Traversal
CVE-2010-0958 2010-03-11 05:14 2010-03-11 Show GitHub Exploit DB Packet Storm
355142 - energizer duo_usb UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers … CWE-94
Code Injection
CVE-2010-0103 2010-03-11 05:13 2010-03-11 Show GitHub Exploit DB Packet Storm
355143 - energizer duo_usb Per: http://www.energizer.com/usbcharger/download/March_8_2010_USB_Release__3_.pdf "Energizer has discontinued sale of this product and has removed the site to download the software. In addition… CWE-94
Code Injection
CVE-2010-0103 2010-03-11 05:13 2010-03-11 Show GitHub Exploit DB Packet Storm
355144 - samba samba smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via stan… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0728 2010-03-11 05:13 2010-03-11 Show GitHub Exploit DB Packet Storm
355145 - inertialfate com_if_nexus Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot do… CWE-22
Path Traversal
CVE-2009-4679 2010-03-9 14:00 2010-03-9 Show GitHub Exploit DB Packet Storm
355146 - perforce perforce_server The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data beginning with a byte sequence of 0x4c, 0xb3, 0xff, 0xff,… CWE-20
 Improper Input Validation 
CVE-2010-0929 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
355147 - perforce perforce_server The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted data that includes a byte sequence of 0xdc, 0xff, 0xff, and 0… CWE-399
 Resource Management Errors
CVE-2010-0930 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
355148 - perforce perforce_server The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data, possibly involving a large sndbuf value. CWE-20
 Improper Input Validation 
CVE-2010-0931 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
355149 - perforce perforce_server The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain MKD command. CWE-20
 Improper Input Validation 
CVE-2010-0932 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm
355150 - perforce perforce_server The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjuncti… CWE-78
OS Command 
CVE-2010-0934 2010-03-8 14:00 2010-03-6 Show GitHub Exploit DB Packet Storm