Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
621	5.3	警告 Network	ImageMagick	ImageMagick	ImageMagickにおける複数の脆弱性	CWE-400 CWE-770	CVE-2026-45031	2026-06-12 14:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

622	6.5	警告 Adjacent	Espressif Systems	ESP-IDF	Espressif SystemsのESP-IDFにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-45160	2026-06-12 14:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

623	8.8	重要 Local	Espressif Systems	ESP-IDF	Espressif SystemsのESP-IDFにおける複数の脆弱性	CWE-20 CWE-787 CWE-787	CVE-2026-45328	2026-06-12 14:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

624	6.5	警告 Local	Espressif Systems	ESP-IDF	Espressif SystemsのESP-IDFにおける複数の脆弱性	CWE-125 CWE-20 CWE-200	CVE-2026-45329	2026-06-12 14:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

625	5.3	警告 Network	ImageMagick	ImageMagick	ImageMagickにおける複数の脆弱性	CWE-125 CWE-193	CVE-2026-45358	2026-06-12 14:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

626	5.7	警告 Local	ImageMagick	ImageMagick	ImageMagickにおける複数の脆弱性	CWE-125 CWE-129	CVE-2026-45359	2026-06-12 14:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

627	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45468	2026-06-12 14:50	2026-06-9	Show	GitHub Exploit DB Packet Storm

628	7	重要 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Windows 11 26h1 Microsoft Windows 11 24h2 Microsoft Wind…	Windows プログラム互換性アシスタントサービスの特権昇格の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-45487	2026-06-12 14:50	2026-06-9	Show	GitHub Exploit DB Packet Storm

629	7.5	重要 Network	Espressif Systems	ESP-IDF	Espressif SystemsのESP-IDFにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-45541	2026-06-12 14:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

630	7.1	重要 Adjacent	Espressif Systems	ESP-IDF	Espressif SystemsのESP-IDFにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-45542	2026-06-12 14:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
309911	-	2daybiz	polls_script	SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL commands via the category parameter.	CWE-89 SQL Injection	CVE-2010-5004	2024-11-21 10:22	2011-11-3	Show	GitHub Exploit DB Packet Storm

309912	-	joe_pieruccini	mclogin_system	SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_…	CWE-89 SQL Injection	CVE-2010-5000	2024-11-21 10:22	2011-11-3	Show	GitHub Exploit DB Packet Storm

309913	-	maulana_al_matien	ardeacore_php_framework	PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore para…	CWE-94 Code Injection	CVE-2010-4998	2024-11-21 10:22	2011-11-3	Show	GitHub Exploit DB Packet Storm

309914	-	olykit	swoopo_clone_2010	SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.	CWE-89 SQL Injection	CVE-2010-4997	2024-11-21 10:22	2011-11-3	Show	GitHub Exploit DB Packet Storm

309915	-	videowhisper	php_2_way_video_chat	Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php.	CWE-79 Cross-site Scripting	CVE-2010-4971	2024-11-21 10:22	2011-11-3	Show	GitHub Exploit DB Packet Storm

309916	-	autartica	com_autartimonial	SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial …	CWE-89 SQL Injection	CVE-2010-5003	2024-11-21 10:22	2011-11-2	Show	GitHub Exploit DB Packet Storm

309917	-	exponentcms	exponent_cms	Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.	CWE-79 Cross-site Scripting	CVE-2010-5002	2024-11-21 10:22	2011-11-2	Show	GitHub Exploit DB Packet Storm

309918	-	esoftpro	online_contact_manager	SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-5001	2024-11-21 10:22	2011-11-2	Show	GitHub Exploit DB Packet Storm

309919	-	esoftpro	online_photo_pro	SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter.	CWE-89 SQL Injection	CVE-2010-4999	2024-11-21 10:22	2011-11-2	Show	GitHub Exploit DB Packet Storm

309920	-	esoftpro	online_guestbook_pro	SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.	CWE-89 SQL Injection	CVE-2010-4996	2024-11-21 10:22	2011-11-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed