Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231101 6.8 警告 tomaz-muraus - Tomaz Muraus Open Blog におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3030 2012-12-20 19:29 2010-08-17 Show GitHub Exploit DB Packet Storm
231102 7.5 危険 phpkick - PHPKick の statistics.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3029 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
231103 3.6 注意 Simon Phillips - Joomla! 用の Aardvertiser コンポーネントにおける特定のファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3028 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
231104 7.5 危険 tycoon - Tycoon Baseball Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3027 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
231105 5 警告 Wireshark - Wireshark の GSM A RR 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-2992 2012-12-20 19:29 2010-06-21 Show GitHub Exploit DB Packet Storm
231106 9.3 危険 raphael assenat - libmikmod の loaders/load_it.c におけるバッファオーバーリードを誘発される脆弱性 CWE-119
バッファエラー
CVE-2010-2971 2012-12-20 19:29 2010-08-5 Show GitHub Exploit DB Packet Storm
231107 7.8 危険 ウインドリバー株式会社 - Wind River VxWorks の FTP デーモンにおけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2968 2012-12-20 19:29 2010-08-5 Show GitHub Exploit DB Packet Storm
231108 7.8 危険 ウインドリバー株式会社 - Wind River VxWorks の loginLib におけるアクセス権を取得される脆弱性 CWE-310
暗号の問題
CVE-2010-2967 2012-12-20 19:29 2010-08-5 Show GitHub Exploit DB Packet Storm
231109 7.8 危険 ウインドリバー株式会社 - Wind River VxWorks の INCLUDE_SECURITY 機能におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-2966 2012-12-20 19:29 2010-08-5 Show GitHub Exploit DB Packet Storm
231110 10 危険 Rockwell Automation
ウインドリバー株式会社
- Rockwell Automation 1756-ENBT series A で使用されている Wind River VxWorks における任意のメモリ領域を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2965 2012-12-20 19:29 2010-08-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1571 7.8 HIGH
Local
- - Missing symlink validation in Language Servers for AWS may allow an arbitrary file write outside of the workspace trust boundary. This may occur when a local user opens a workspace with a maliciously… New CWE-61
 UNIX Symbolic Link (Symlink) Following
CVE-2026-12958 2026-06-24 04:36 2026-06-24 Show GitHub Exploit DB Packet Storm
1572 6.5 MEDIUM
Network
- - SQL Injection vulnerability in Cboard v.0.4.2 and before allows a remote attacker to execute arbitrary code via the getDimensionsValues component New CWE-89
SQL Injection
CVE-2026-52673 2026-06-24 04:35 2026-06-24 Show GitHub Exploit DB Packet Storm
1573 - - - Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs. New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2025-62180 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1574 5.2 MEDIUM
Local
- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocket connection was opened, Deno checked the destination hostname against --deny-net rules but did not re-check … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-49860 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1575 5.2 MEDIUM
Local
- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, environment access is gated by the env permission. You can deny it with --deny-env, or restrict it to a specific allowlist w… New CWE-863
 Incorrect Authorization
CVE-2026-49983 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1576 4.3 MEDIUM
Network
- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.5, a Deno program that opens a client WebSocket connection could be crashed by the remote server. While handling the WebSocket … New CWE-248
 Uncaught Exception
CVE-2026-55517 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1577 7.6 HIGH
Adjacent
- - Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.6.0, the Konnected integration registers an HTTP endpoint, KonnectedView (homeassistant… New CWE-200
CWE-306
Information Exposure
Missing Authentication for Critical Function
CVE-2026-54317 2026-06-24 04:34 2026-06-24 Show GitHub Exploit DB Packet Storm
1578 - - - Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including att… New CWE-183
CWE-200
CWE-515
 Permissive List of Allowed Inputs
Information Exposure
CVE-2026-54316 2026-06-24 04:32 2026-06-24 Show GitHub Exploit DB Packet Storm
1579 7.5 HIGH
Network
- - An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New CWE-89
SQL Injection
CVE-2025-61024 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm
1580 7.5 HIGH
Network
- - An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. New CWE-89
SQL Injection
CVE-2025-61029 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm