Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257451	9	危険	アップル	-	Apple Mac OS X のパスワードサーバにおけるログインアクセスを取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0510	2010-04-15 18:37	2010-03-29	Show	GitHub Exploit DB Packet Storm

257452	7.2	危険	アップル	-	Apple Mac OS X の SFLServer における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0509	2010-04-15 18:37	2010-03-29	Show	GitHub Exploit DB Packet Storm

257453	7.8	危険	アップル	-	Apple Mac OS X の Mail における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2010-0525	2010-04-15 18:36	2010-03-29	Show	GitHub Exploit DB Packet Storm

257454	4	警告	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL の mysqld におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2009-4019	2010-04-15 18:16	2009-11-30	Show	GitHub Exploit DB Packet Storm

257455	6.8	警告	The PHP Group アップル	-	PHP の posix_mkfifo 関数における open_basedir の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3558	2010-04-15 18:16	2009-11-23	Show	GitHub Exploit DB Packet Storm

257456	4.4	警告	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL における権限チェックを回避される脆弱性	CWE-59 リンク解釈の問題	CVE-2009-4030	2010-04-15 18:16	2009-11-5	Show	GitHub Exploit DB Packet Storm

257457	2.6	注意	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4456	2010-04-15 18:15	2008-10-6	Show	GitHub Exploit DB Packet Storm

257458	10	危険	アップル	-	Apple Mac OS X の Mail における脆弱性	CWE-noinfo 情報不足	CVE-2010-0508	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

257459	6.8	警告	アップル	-	Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0507	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

257460	6.8	警告	アップル	-	Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0506	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
5201	9.3	CRITICAL Network	-	-	PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting (XSS) vulnerability in the PrestaShop back-office Customer Service view. An u…	CWE-79 Cross-site Scripting	CVE-2026-44212	2026-05-15 23:30	2026-05-15	Show	GitHub Exploit DB Packet Storm

5202	5.4	MEDIUM Network	-	-	Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a file containing malicious contents is uploaded, an arbitrary script …	CWE-79 Cross-site Scripting	CVE-2026-24662	2026-05-15 23:30	2026-05-15	Show	GitHub Exploit DB Packet Storm

5203	8.1	HIGH Network	-	-	Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a user views a malicious page while logged-in to the affected pr…	CWE-352 Origin Validation Error	CVE-2026-28761	2026-05-15 23:30	2026-05-15	Show	GitHub Exploit DB Packet Storm

5204	6.5	MEDIUM Network	pyload-ng_project	pyload-ng	pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, when passing a folder name in the set_package_data() API function call inside the data object with key "_…	CWE-22 CWE-36 Path Traversal Absolute Path Traversal	CVE-2026-42315	2026-05-15 23:29	2026-05-12	Show	GitHub Exploit DB Packet Storm

5205	5.5	MEDIUM Local	microsoft	live_preview	Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.	CWE-22 CWE-23 Path Traversal Relative Path Traversal	CVE-2026-41612	2026-05-15 23:25	2026-05-13	Show	GitHub Exploit DB Packet Storm

5206	8.8	HIGH Network	microsoft	visual_studio_code	Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.	CWE-78 CWE-384 OS Command Session Fixation	CVE-2026-41613	2026-05-15 23:23	2026-05-13	Show	GitHub Exploit DB Packet Storm

5207	7.5	HIGH Network	webtechnologies	changedetection	changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vu…	CWE-73 External Control of File Name or Path	CVE-2026-43891	2026-05-15 23:20	2026-05-13	Show	GitHub Exploit DB Packet Storm

5208	6.7	MEDIUM Local	fortinet	fortiap fortiap-w2	An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versi…	CWE-78 OS Command	CVE-2025-53870	2026-05-15 23:15	2026-05-13	Show	GitHub Exploit DB Packet Storm

5209	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit …	CWE-20 Improper Input Validation	CVE-2026-34688	2026-05-15 23:14	2026-05-13	Show	GitHub Exploit DB Packet Storm

5210	6.2	MEDIUM Local	adobe	c2pa c2pa-web	CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exp…	CWE-190 Integer Overflow or Wraparound	CVE-2026-34680	2026-05-15 23:14	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed