Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252351	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web Monitor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2733	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252352	5.8	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web インターフェースにおける任意の Web サイトへリダイレクトされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2732	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252353	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の AES および RC4 の復号化機能における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4212	2010-12-7 16:40	2010-01-12	Show	GitHub Exploit DB Packet Storm

252354	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	MIT Kerberos の asn1_decode_generaltime 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0846	2010-12-7 16:39	2009-04-7	Show	GitHub Exploit DB Packet Storm

252355	5	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の spnego_gss_accept_sec_context 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0845	2010-12-7 16:38	2009-03-27	Show	GitHub Exploit DB Packet Storm

252356	5.8	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の SPNEGO 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0844	2010-12-7 16:38	2009-04-7	Show	GitHub Exploit DB Packet Storm

252357	4	警告	Pidgin レッドハット	-	Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3711	2010-12-7 15:44	2010-05-12	Show	GitHub Exploit DB Packet Storm

252358	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3336	2010-12-6 16:51	2010-11-9	Show	GitHub Exploit DB Packet Storm

252359	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2573	2010-12-6 16:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

252360	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3337	2010-12-6 15:44	2010-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2451	6.3	MEDIUM Network	-	-	A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function post_data.get of the component API Endpoint. Such manipulation leads to server-side request fo…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-6119	2026-04-25 02:58	2026-04-12	Show	GitHub Exploit DB Packet Storm

2452	6.3	MEDIUM Network	-	-	A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler…	CWE-74 CWE-94 Injection Code Injection	CVE-2026-6125	2026-04-25 02:58	2026-04-12	Show	GitHub Exploit DB Packet Storm

2453	7.3	HIGH Network	-	-	A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is an unknown function of the component Administrative HTTP Endpoint. This manipulation causes missin…	CWE-287 CWE-306 Improper Authentication Missing Authentication for Critical Function	CVE-2026-6126	2026-04-25 02:58	2026-04-12	Show	GitHub Exploit DB Packet Storm

2454	7.3	HIGH Network	-	-	A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the component Agent Mode Service. Performing a manipulation results in missing aut…	CWE-287 CWE-306 Improper Authentication Missing Authentication for Critical Function	CVE-2026-6129	2026-04-25 02:58	2026-04-13	Show	GitHub Exploit DB Packet Storm

2455	7.3	HIGH Network	-	-	A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server …	CWE-77 CWE-78 Command Injection OS Command	CVE-2026-6130	2026-04-25 02:58	2026-04-13	Show	GitHub Exploit DB Packet Storm

2456	6.3	MEDIUM Network	-	-	A vulnerability was determined in danielmiessler Personal_AI_Infrastructure up to 2.3.0. Affected is an unknown function of the file Skills/Parser/Tools/parse_url.ts. Executing a manipulation can lea…	CWE-77 CWE-78 Command Injection OS Command	CVE-2026-6141	2026-04-25 02:58	2026-04-13	Show	GitHub Exploit DB Packet Storm

2457	7.3	HIGH Network	-	-	A vulnerability was identified in tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. Affected by this vulnerability is an unknown functionality of the file /admin/roo…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-6142	2026-04-25 02:58	2026-04-13	Show	GitHub Exploit DB Packet Storm

2458	6.3	MEDIUM Network	-	-	A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the component ProxyServer. …	CWE-346 CWE-942 Origin Validation Error Permissive Cross-domain Policy with Untrusted Domains	CVE-2026-6143	2026-04-25 02:57	2026-04-13	Show	GitHub Exploit DB Packet Storm

2459	7.3	HIGH Network	-	-	A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /util/MonthTotalReportUpdateFunction.php. …	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-6148	2026-04-25 02:57	2026-04-13	Show	GitHub Exploit DB Packet Storm

2460	7.3	HIGH Network	-	-	A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Affected by this issue is some unknown functionality of the file /util/BookVehicleFunction.php. Executing a manipulation…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-6149	2026-04-25 02:57	2026-04-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed