Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251911 7.5 危険 t-dreams - T-Dreams Job Career Package の Resumes/TD_RESUME_Indlist.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4830 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251912 7.5 危険 t-dreams - T-Dreams Cars Ads Package の processview.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4829 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251913 4.3 警告 SolarWinds - SolarWinds Orion NPM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4828 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251914 4.3 警告 Snitz - Snitz Forums の members.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4827 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251915 7.5 危険 Snitz - Snitz Forums の members.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4826 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251916 4.3 警告 WordPress.org
pleer
- WordPress 用の Twitter Feed プラグイン の magpie_debug.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4825 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
251917 7.5 危険 bestsoftinc - BSI Advance Hotel Booking System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4814 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251918 3.5 注意 Drupal
scheepers de bruin
- Drupal 用の Category Tokens モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4813 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251919 6.5 警告 6kbbs - 6kbbs における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4812 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
251920 4.3 警告 6kbbs - 6kbbs の ajaxmember.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4811 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5921 4.3 MEDIUM
Network
microsoft edge_chromium User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-40416 2026-05-18 22:26 2026-05-13 Show GitHub Exploit DB Packet Storm
5922 7.5 HIGH
Network
- - A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS pa… CWE-475
 Undefined Behavior for Input to API
CVE-2026-42009 2026-05-18 22:16 2026-05-18 Show GitHub Exploit DB Packet Storm
5923 9.8 CRITICAL
Network
netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a request carries both… CWE-444
HTTP Request Smuggling
CVE-2026-42581 2026-05-18 22:14 2026-05-14 Show GitHub Exploit DB Packet Storm
5924 9.8 CRITICAL
Network
espressif arduino-esp32 arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer multipart form parser in arduino-esp32 allocates a … CWE-121
Stack-based Buffer Overflow
CVE-2026-42854 2026-05-18 22:09 2026-05-13 Show GitHub Exploit DB Packet Storm
5925 8.8 HIGH
Network
mongodb mongodb An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issu… CWE-787
 Out-of-bounds Write
CVE-2026-8053 2026-05-18 22:06 2026-05-13 Show GitHub Exploit DB Packet Storm
5926 7.5 HIGH
Network
thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handle… CWE-362
Race Condition
CVE-2026-42594 2026-05-18 22:02 2026-05-15 Show GitHub Exploit DB Packet Storm
5927 8.2 HIGH
Network
thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifTool happily renames t… CWE-73
CWE-184
 External Control of File Name or Path
 Incomplete Blacklist
CVE-2026-40893 2026-05-18 22:02 2026-05-15 Show GitHub Exploit DB Packet Storm
5928 8.2 HIGH
Network
thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the LibreOffice conversion endpoint (/forms/libreoffice/convert) passes uploaded documents directly to LibreOffice without … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42591 2026-05-18 22:02 2026-05-15 Show GitHub Exploit DB Packet Storm
5929 5.9 MEDIUM
Network
thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the /forms/chromium/convert/url and /forms/chromium/screenshot/url routes accept url=file:///tmp/... from anonymous callers… CWE-73
CWE-918
 External Control of File Name or Path
Server-Side Request Forgery (SSRF) 
CVE-2026-42597 2026-05-18 22:02 2026-05-15 Show GitHub Exploit DB Packet Storm
5930 5.3 MEDIUM
Network
thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, FilterOutboundURL resolves the hostname, checks the resolved IPs against the private-address deny-list, and returns only th… CWE-367
CWE-918
 Time-of-check Time-of-use (TOCTOU) Race Condition
Server-Side Request Forgery (SSRF) 
CVE-2026-42592 2026-05-18 22:02 2026-05-15 Show GitHub Exploit DB Packet Storm