Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247821 6.9 警告 herac - TuxGuitar における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3385 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247822 6.9 警告 Bernhard Wymann - TORCS の torcs などのスクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3384 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247823 6.9 警告 TeamSpeak Systems GmbH - TeamSpeak の teamspeak スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3383 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247824 6.9 警告 uoregon - TAU の tauex における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3382 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247825 6.9 警告 alex launi - Tangerine の tangerine スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3381 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247826 6.9 警告 Lawrence Livermore National Laboratory (LLNL) - SLURM の init.d/slurm スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3380 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
247827 6.9 警告 scilab - Scilab の scilab スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3378 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247828 6.9 警告 salome-platform - SALOME の runSalome スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3377 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247829 6.9 警告 CERN - ROOT の proofserv などのスクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3376 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
247830 6.9 警告 ノキア - Qt Creator における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3374 2012-03-27 18:42 2010-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 6.1 MEDIUM
Network 		- - AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Att… New CWE-79
Cross-site Scripting 		CVE-2023-54349 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
132 8.8 HIGH
Network 		- - ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to execute arbitrary code by injecting formula payloads into vendor name fields. Attackers can add malicious … New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2023-54348 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
133 7.5 HIGH
Network 		- - OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers c… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2023-54347 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
134 7.5 HIGH
Network 		- - WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file path… New CWE-538
 File and Directory Information Exposure 		CVE-2023-54346 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
135 8.8 HIGH
Network 		- - Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame intr… New CWE-94
Code Injection 		CVE-2023-54345 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
136 9.8 CRITICAL
Network 		- - Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interface.… New CWE-306
Missing Authentication for Critical Function 		CVE-2023-54344 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
137 9.8 CRITICAL
Network 		- - Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenticated attackers to execute arbitrary code by exploiting the… New CWE-306
Missing Authentication for Critical Function 		CVE-2023-54342 2026-05-5 21:16 2026-05-5 Show GitHub Exploit DB Packet Storm
138 7.5 HIGH
Network 		- - fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an… New CWE-436
 Interpretation Conflict 		CVE-2026-6322 2026-05-5 20:16 2026-05-5 Show GitHub Exploit DB Packet Storm
139 6.5 MEDIUM
Network 		- - RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x… New CWE-295
Improper Certificate Validation  		CVE-2025-42611 2026-05-5 20:16 2026-05-5 Show GitHub Exploit DB Packet Storm
140 - - - Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'),… New CWE-22
CWE-113
CWE-346
CWE-400
Path Traversal
HTTP Response Splitting
 Origin Validation Error
 Uncontrolled Resource Consumption 		CVE-2026-43870 2026-05-5 19:16 2026-05-5 Show GitHub Exploit DB Packet Storm