Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250671 4.3 警告 Drupal
Earl Miles		 - Drupal の Views モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4520 2012-03-27 18:42 2010-06-16 Show GitHub Exploit DB Packet Storm
250672 6.8 警告 Drupal
Earl Miles		 - Drupal の Views モジュールの Views UI 実装におけるクロスサイトリクエストフォージェリーの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-4519 2012-03-27 18:42 2010-06-16 Show GitHub Exploit DB Packet Storm
250673 4.3 警告 wobeo - WordPress の Safe Search プラグインにおける クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4518 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250674 6.8 警告 Joomla!
Jextensions		 - Joomla! の JExtensions JE Auto (com_jeauto) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4517 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
250675 5 警告 IBM - IBM Lotus Notes Traveler におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4552 2012-03-27 18:42 2009-11-23 Show GitHub Exploit DB Packet Storm
250676 6.2 警告 オラクル - Passlogix v-GO SSPR における任意のプログラムを実行される脆弱性 CWE-310
暗号の問題 		CVE-2010-4506 2012-03-27 18:42 2011-02-7 Show GitHub Exploit DB Packet Storm
250677 4.3 警告 TIBCO Software - TIBCO Collaborative Information Manager サーバにおけるセッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2010-4499 2012-03-27 18:42 2011-01-5 Show GitHub Exploit DB Packet Storm
250678 7.5 危険 TIBCO Software - TIBCO Collaborative Information Manager サーバにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4498 2012-03-27 18:42 2011-01-5 Show GitHub Exploit DB Packet Storm
250679 4.3 警告 TIBCO Software - TIBCO Collaborative Information Manager サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4497 2012-03-27 18:42 2011-01-5 Show GitHub Exploit DB Packet Storm
250680 7.5 危険 TIBCO Software - TIBCO Collaborative Information Manager サーバにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4496 2012-03-27 18:42 2011-01-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1561 - - - An improper access check allows privilege escalation through the com_users batch task. New CWE-284
Improper Access Control 		CVE-2026-48899 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1562 - - - An improper access check allows privilege escalation through the com_users batch task. New CWE-284
Improper Access Control 		CVE-2026-48898 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1563 - - - Insufficient state checks lead to a vector that allows to bypass 2FA checks. New CWE-287
Improper Authentication 		CVE-2026-48897 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1564 - - - Insufficient state checks lead to a vector that allows to bypass 2FA checks. New CWE-287
Improper Authentication 		CVE-2026-48896 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1565 - - - Rejected reason: Further research determined the issue is not a vulnerability. New - CVE-2026-48091 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1566 4.3 MEDIUM
Network 		- - Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the uploaded metadata. An a… New CWE-862
 Missing Authorization 		CVE-2026-47728 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1567 3.1 LOW
Network 		- - Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the … New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-47716 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1568 3.1 LOW
Network 		- - Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requir… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-47715 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1569 - - - Improper Neutralization of CRLF Sequences vulnerability in benoitc hackney allows HTTP Request Splitting. hackney does not percent-encode carriage return (\r) or line feed (\n) characters in the URL … New CWE-93
CRLF Injection 		CVE-2026-47075 2026-05-27 02:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1570 - - - Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Request/Response Splitting. The WebSocket upgrade code in src/hackney_ws.erl copies the host,… New CWE-93
CRLF Injection 		CVE-2026-47072 2026-05-27 02:16 2026-05-26 Show GitHub Exploit DB Packet Storm