Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231361 7.5 危険 roberto aloi - Joomla! 用の Picasa コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1306 2012-12-20 19:29 2010-04-8 Show GitHub Exploit DB Packet Storm
231362 7.5 危険 yamamah - Yamamah の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1300 2012-12-20 19:29 2010-04-7 Show GitHub Exploit DB Packet Storm
231363 4 警告 PulseCMS - Pulse CMS の view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1298 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
231364 7.5 危険 Zabbix - Zabbix の API における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1277 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
231365 4.3 警告 webtoolkit - Emweb Wt におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1274 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
231366 7.5 危険 smart-plugs - smartplugs の showplugs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1271 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
231367 7.5 危険 phpscripte24 - Multi Auktions Komplett System の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1270 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
231368 7.5 危険 phpscripte24 - phpscripte24 Niedrig Gebote Pro Auktions System II の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1269 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
231369 6.8 警告 stafford.uklinux - libESMTP の smtp-tls.c における信頼済み証明書を偽装される脆弱性 CWE-310
暗号の問題 		CVE-2010-1194 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
231370 6.8 警告 stafford.uklinux - libESMTP における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2010-1192 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2011 - - - Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do… CWE-303
 Incorrect Implementation of Authentication Algorithm 		CVE-2026-41048 2026-06-23 03:32 2026-06-23 Show GitHub Exploit DB Packet Storm
2012 - - - Incorrect caching of authentication between different users of the  qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authentica… CWE-303
 Incorrect Implementation of Authentication Algorithm 		CVE-2026-41049 2026-06-23 03:32 2026-06-23 Show GitHub Exploit DB Packet Storm
2013 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 30… CWE-79
Cross-site Scripting 		CVE-2026-12619 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2014 - - - The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. CWE-200
Information Exposure 		CVE-2026-12620 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2015 - - - Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0. CWE-79
Cross-site Scripting 		CVE-2026-12621 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2016 - - - The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. CWE-601
Open Redirect 		CVE-2026-12622 2026-06-23 03:29 2026-06-20 Show GitHub Exploit DB Packet Storm
2017 7.8 HIGH
Local 		- - A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-12778 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm
2018 7.8 HIGH
Local 		- - A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to imprope… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-12780 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm
2019 7.8 HIGH
Local 		- - A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The … CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-12786 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm
2020 7.8 HIGH
Local 		- - A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The manipulation leads to… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-12781 2026-06-23 03:24 2026-06-21 Show GitHub Exploit DB Packet Storm