Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251121	5	警告	Zikula Foundation	-	Zikula における乱数化をベースにした保護機能を破られる脆弱性	CWE-310 暗号の問題	CVE-2010-4728	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

251122	10	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4727	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

251123	10	危険	Smarty	-	Smarty の math プラグインにおける詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4726	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

251124	10	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4725	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

251125	10	危険	Smarty	-	Smarty のパーサー実装における詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4724	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

251126	9.3	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4723	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

251127	10	危険	Smarty	-	Smarty の fetch プラグインにおける詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4722	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

251128	7.5	危険	MH Products	-	Immo Makler の news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4721	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

251129	7.5	危険	Joomla! Jextensions	-	Joomla! の JExtensions JE Auto (com_jeauto) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4720	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

251130	7.5	危険	fxwebdesign	-	Joomla! の JRadio (com_jradio) コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4719	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
5081	5.5	MEDIUM Local	m2team	nanazip	NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an integer divide-by-zero exists in the UFS/UFS2 filesystem image parser in NanaZip. The vulnerability is triggered when …	CWE-369 Divide By Zero	CVE-2026-42443	2026-05-18 22:46	2026-05-13	Show	GitHub Exploit DB Packet Storm

5082	7.5	HIGH Network	bytecodealliance	wasmtime	Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow. This ove…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-44216	2026-05-18 22:36	2026-05-15	Show	GitHub Exploit DB Packet Storm

5083	7.8	HIGH Local	microsoft	azure_connected_machine_agent	Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.	CWE-284 Improper Access Control	CVE-2026-40381	2026-05-18 22:35	2026-05-13	Show	GitHub Exploit DB Packet Storm

5084	6.5	MEDIUM Network	shellhub	shellhub	ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/devices/:uid returns the full device object whenever the caller is authenticated, without verifying that the device belongs to the cal…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44424	2026-05-18 22:35	2026-05-14	Show	GitHub Exploit DB Packet Storm

5085	5.4	MEDIUM Network	shellhub	shellhub	ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in the the name field of each filter property in the base64-encoded filter query p…	CWE-20 CWE-943 CWE-1333 Improper Input Validation Improper Neutralization of Special Elements in Data Query Logic Inefficient Regular Expression Complexity	CVE-2026-44425	2026-05-18 22:34	2026-05-14	Show	GitHub Exploit DB Packet Storm

5086	4.3	MEDIUM Network	microsoft	edge	User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-35429	2026-05-18 22:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

5087	5.5	MEDIUM Local	microsoft	teams	Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.	CWE-552 Files or Directories Accessible to External Parties	CVE-2026-32185	2026-05-18 22:33	2026-05-13	Show	GitHub Exploit DB Packet Storm

5088	4.3	MEDIUM Network	microsoft	edge_chromium	User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-40416	2026-05-18 22:26	2026-05-13	Show	GitHub Exploit DB Packet Storm

5089	7.5	HIGH Network	-	-	A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS pa…	CWE-475 Undefined Behavior for Input to API	CVE-2026-42009	2026-05-18 22:16	2026-05-18	Show	GitHub Exploit DB Packet Storm

5090	9.8	CRITICAL Network	netty	netty	Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a request carries both…	CWE-444 HTTP Request Smuggling	CVE-2026-42581	2026-05-18 22:14	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed