Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251331 6.8 警告 jikaka - Teams Structure モジュールの team.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0512 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251332 7.5 危険 joomtraders - Joomla! の com_allcinevid コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0511 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251333 7.5 危険 awbs - AWBS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0510 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251334 4.3 警告 vaadin - Vaadin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0509 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251335 4.3 警告 Contao - Contao CMS の system/modules/comments/Comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0508 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251336 4.3 警告 blackmoonftpserver - Blackmoon FTP の FTPService.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-0507 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251337 6.8 警告 tsixm - AxDCMS の modules/profile/user.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0506 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251338 5.1 警告 remi jean - Zwii の system/system.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0505 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251339 4.3 警告 vamshop - VaM Shop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0504 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251340 6.8 警告 vamshop - VaM Shop におけるクロスサイトフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0503 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5241 7.2 HIGH
Network
misp misp MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, an improper access control vulnerability in the authentication key reset functionality allowed an authenticated organ… CWE-863
 Incorrect Authorization
CVE-2026-44380 2026-05-16 02:42 2026-05-14 Show GitHub Exploit DB Packet Storm
5242 5.3 MEDIUM
Network
misp misp MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, a SQL injection vulnerability existed in the handling of user-controlled ordering parameters in the event and shadow … CWE-89
SQL Injection
CVE-2026-44381 2026-05-16 02:37 2026-05-14 Show GitHub Exploit DB Packet Storm
5243 8.1 HIGH
Network
fit2cloud sqlbot SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-Workspace IDOR (Insecure Direct Object Reference) and Authorization Bypass … CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-42463 2026-05-16 02:34 2026-05-14 Show GitHub Exploit DB Packet Storm
5244 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remote Code Execution. T… CWE-88
Argument Injection
CVE-2026-44193 2026-05-16 02:30 2026-05-14 Show GitHub Exploit DB Packet Storm
5245 4.7 MEDIUM
Network
lfprojects mcp_registry The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audienc… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44428 2026-05-16 02:23 2026-05-15 Show GitHub Exploit DB Packet Storm
5246 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileg… CWE-78
OS Command 
CVE-2026-44194 2026-05-16 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm
5247 6.5 MEDIUM
Network
shellhub shellhub ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated u… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-44423 2026-05-16 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
5248 7.5 HIGH
Network
zitadel zitadel ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to pro… CWE-90
LDAP Injection
CVE-2026-44671 2026-05-16 02:15 2026-05-15 Show GitHub Exploit DB Packet Storm
5249 6.5 MEDIUM
Network
frappe erpnext ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyo… CWE-862
 Missing Authorization
CVE-2026-44448 2026-05-16 01:20 2026-05-14 Show GitHub Exploit DB Packet Storm
5250 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell scrip… CWE-88
Argument Injection
CVE-2026-45158 2026-05-16 01:19 2026-05-14 Show GitHub Exploit DB Packet Storm