Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
901	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-46236	2026-06-11 16:20	2026-05-28	Show	GitHub Exploit DB Packet Storm

902	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-46237	2026-06-11 16:19	2026-05-28	Show	GitHub Exploit DB Packet Storm

903	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-46238	2026-06-11 16:19	2026-05-28	Show	GitHub Exploit DB Packet Storm

904	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-46239	2026-06-11 16:19	2026-05-28	Show	GitHub Exploit DB Packet Storm

905	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-46240	2026-06-11 16:19	2026-05-28	Show	GitHub Exploit DB Packet Storm

906	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-46241	2026-06-11 16:19	2026-05-28	Show	GitHub Exploit DB Packet Storm

907	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-46242	2026-06-11 16:19	2026-05-30	Show	GitHub Exploit DB Packet Storm

908	7.1	重要 Adjacent	マイクロソフト	Microsoft Windows Server 2012 Microsoft Windows Server 2016 Microsoft Windows Server 2022 Microsoft Windows Server 2019 Microso…	Windows Kerberos キー配布センター (KDC) のリモートコード実行	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-47288	2026-06-11 16:19	2026-06-9	Show	GitHub Exploit DB Packet Storm

909	9.8	緊急 Network	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2012 Microsoft Windows 11 24h2 Microsoft Windows 10 21h2 Microsoft Wind…	HTTP.sys のリモートでコードが実行される脆弱性	CWE-122 CWE-190	CVE-2026-47291	2026-06-11 16:19	2026-06-9	Show	GitHub Exploit DB Packet Storm

910	5.4	警告 Network	マイクロソフト	Microsoft SharePoint Server	Microsoft SharePoint Server のなりすましの脆弱性	CWE-74 CWE-79	CVE-2026-47634	2026-06-11 16:19	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
310011	-	simon_philips	com_aardvertiser	SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view a…	CWE-89 SQL Injection	CVE-2010-4904	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310012	-	cubecart	cubecart	SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.	CWE-89 SQL Injection	CVE-2010-4903	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310013	-	joomla-clantools	clantools	Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame paramete…	CWE-89 SQL Injection	CVE-2010-4902	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310014	-	squiz	mysource_matrix	Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter.	CWE-79 Cross-site Scripting	CVE-2010-4901	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310015	-	webmanager-pro	cms_webmanager-pro	Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.	CWE-20 Improper Input Validation	CVE-2010-4900	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310016	-	webmanager-pro	cms_webmanager-pro	SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-4899	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310017	-	gantry-framework	com_gantry	SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php.	CWE-89 SQL Injection	CVE-2010-4898	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310018	-	bluecms_project	bluecms	SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.	CWE-89 SQL Injection	CVE-2010-4897	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310019	-	expinion.net	member_management_system	Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REF_URL parameter.	CWE-79 Cross-site Scripting	CVE-2010-4896	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

310020	-	chillycms	chillycms	Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE:…	CWE-79 Cross-site Scripting	CVE-2010-4895	2024-11-21 10:22	2011-10-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed