Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
971 8.8 重要
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35324 2026-06-22 11:38 2026-06-17 Show GitHub Exploit DB Packet Storm
972 8.8 重要
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35325 2026-06-22 11:38 2026-06-17 Show GitHub Exploit DB Packet Storm
973 7.2 重要
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35326 2026-06-22 11:38 2026-06-17 Show GitHub Exploit DB Packet Storm
974 7.6 重要
Network 		オラクル Oracle WebCenter Content オラクルのOracle WebCenter Contentにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35327 2026-06-22 11:38 2026-06-17 Show GitHub Exploit DB Packet Storm
975 7.3 重要
Local 		マイクロソフト Microsoft .NET Framework
.NET 		.NET の特権の昇格の脆弱性 CWE-190
CWE-20
CWE-noinfo
CVE-2026-35433 2026-06-22 11:38 2026-05-12 Show GitHub Exploit DB Packet Storm
976 7.1 重要
Local 		Linux Foundation Kedro Linux FoundationのKedroにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-3840 2026-06-22 11:38 2026-06-12 Show GitHub Exploit DB Packet Storm
977 8.8 重要
Network 		マイクロソフト SQL Server 2016
SQL Server 2019
SQL Server 2025
SQL Server 2022
SQL Server 2017 		SQL Server のリモート コードが実行される脆弱性 CWE-610
CWE-73
CVE-2026-40370 2026-06-22 11:38 2026-05-12 Show GitHub Exploit DB Packet Storm
978 8.8 重要
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 (オンプレミス) の特権昇格の脆弱性 CWE-280
CWE-755
CVE-2026-40371 2026-06-22 11:38 2026-06-9 Show GitHub Exploit DB Packet Storm
979 7.2 重要
Network 		VMware Spring Security VMwareのSpring Securityにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40993 2026-06-22 11:38 2026-06-10 Show GitHub Exploit DB Packet Storm
980 8.4 重要
Network 		マイクロソフト Azure Stack Edge Azure Stack Edge のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41098 2026-06-22 11:38 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254191 8.8 HIGH
Network 		iscripts eswap iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel. CWE-352
 Origin Validation Error 		CVE-2018-10048 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254192 4.8 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter. CWE-79
Cross-site Scripting 		CVE-2018-10033 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254193 4.8 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_version parameter. CWE-79
Cross-site Scripting 		CVE-2018-10032 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254194 8.8 HIGH
Network 		cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php. CWE-352
 Origin Validation Error 		CVE-2018-10031 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254195 8.8 HIGH
Network 		cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php. CWE-352
 Origin Validation Error 		CVE-2018-10030 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254196 4.8 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799. CWE-79
Cross-site Scripting 		CVE-2018-10029 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254197 5.3 MEDIUM
Network 		joyplus-cms_project joyplus-cms joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI. CWE-200
Information Exposure 		CVE-2018-10028 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254198 4.8 MEDIUM
Network 		yzmcms yzmcms The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php. CWE-79
Cross-site Scripting 		CVE-2018-10026 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254199 9.8 CRITICAL
Network 		ubiquoss vp5208a_firmware ubiQuoss Switch VP5208A creates a bcm_password file at /cgi-bin/ with the user credentials in cleartext when a failed login attempt occurs. The file can be reached via an HTTP request. The credential… CWE-522
 Insufficiently Protected Credentials 		CVE-2018-10024 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
254200 5.4 MEDIUM
Network 		catfish-cms catfish_cms Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun (aka an authenticated comment). CWE-79
Cross-site Scripting 		CVE-2018-10023 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm