Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4811 7.8 重要
Local 		LibreOffice プロジェクト LibreOffice LibreOffice プロジェクトのLibreOfficeにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-4430 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
4812 8.4 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-44334 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4813 9.8 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-44335 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4814 9.6 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-20
CWE-22
CWE-829
CWE-913
CWE-94
CVE-2026-44336 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4815 6.3 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-20
CWE-89
CVE-2026-44337 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4816 7.3 重要
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-1188
CWE-306
CWE-668
CVE-2026-44338 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4817 8.6 重要
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAI等の複数製品におけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 CWE-470
クラスまたはコードを選択する外部から制御された入力の使用 		CVE-2026-44339 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4818 7.5 重要
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-22
CWE-59
CVE-2026-44340 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4819 7.8 重要
Local 		ZTE ZXCLOUD iRAI ZTEのZXCLOUD iRAIにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2026-44406 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
4820 7.5 重要
Network 		Zcash Foundation Zebrad Zcash FoundationのZebradにおける計算の誤りに関する脆弱性 CWE-682
計算の誤り 		CVE-2026-44498 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347801 - awdsolution com_awdwall Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. CWE-22
Path Traversal 		CVE-2010-1494 2017-08-17 10:32 2010-04-23 Show GitHub Exploit DB Packet Storm
347802 - jolt com_joltcard SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cardID parameter in a view action to index.php. CWE-89
SQL Injection 		CVE-2010-1496 2017-08-17 10:32 2010-04-23 Show GitHub Exploit DB Packet Storm
347803 - clausvb dl_stats Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. CWE-79
Cross-site Scripting 		CVE-2010-1497 2017-08-17 10:32 2010-04-23 Show GitHub Exploit DB Packet Storm
347804 - clausvb dl_stats Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) download.php and (2) view_file.php. CWE-89
SQL Injection 		CVE-2010-1498 2017-08-17 10:32 2010-04-23 Show GitHub Exploit DB Packet Storm
347805 - musicboxv2 musicbox SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2010-1499 2017-08-17 10:32 2010-04-23 Show GitHub Exploit DB Packet Storm
347806 - uiga proxy PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content paramet… CWE-94
Code Injection 		CVE-2010-1528 2017-08-17 10:32 2010-04-27 Show GitHub Exploit DB Packet Storm
347807 - freestyle faqs_lite SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq actio… CWE-89
SQL Injection 		CVE-2010-1529 2017-08-17 10:32 2010-04-27 Show GitHub Exploit DB Packet Storm
347808 - redcomponent com_redshop Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. CWE-22
Path Traversal 		CVE-2010-1531 2017-08-17 10:32 2010-04-27 Show GitHub Exploit DB Packet Storm
347809 - joomla.batjo com_shoutbox Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. CWE-22
Path Traversal 		CVE-2010-1534 2017-08-17 10:32 2010-04-27 Show GitHub Exploit DB Packet Storm
347810 - francois_bissonnette phpcdb Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_global parameter to (1) first… CWE-22
Path Traversal 		CVE-2010-1537 2017-08-17 10:32 2010-04-27 Show GitHub Exploit DB Packet Storm