Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2961	9.1	緊急 Network	DDEV	DDEV	DDEVにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-32885	2026-05-13 10:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

2962	6.5	警告 Network	langflow	Langflow Desktop	langflowのLangflow Desktopにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-3340	2026-05-13 10:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

2963	6.5	警告 Network	langflow	Langflow Desktop	langflowのLangflow Desktopにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-3345	2026-05-13 10:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

2964	6.4	警告 Network	langflow	Langflow Desktop	langflowのLangflow DesktopにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-3346	2026-05-13 10:27	2026-04-30	Show	GitHub Exploit DB Packet Storm

2965	4.8	警告 Network	V2Board	V2Board	V2Boardにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-37503	2026-05-13 10:26	2026-05-1	Show	GitHub Exploit DB Packet Storm

2966	7.5	重要 Network	V2Board	V2Board	V2BoardにおけるGET リクエストにおけるクエリ文字列からの情報漏えいに関する脆弱性	CWE-598 GET リクエストにおけるクエリ文字列からの情報漏えい	CVE-2026-37504	2026-05-13 10:26	2026-05-1	Show	GitHub Exploit DB Packet Storm

2967	4.9	警告 Network	V2Board	V2Board	V2BoardにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-37505	2026-05-13 10:26	2026-05-1	Show	GitHub Exploit DB Packet Storm

2968	5.4	警告 Network	Apache Software Foundation	Apache-airflow-providers-keycloak	Apache Software FoundationのApache-airflow-providers-keycloakにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-40948	2026-05-13 10:26	2026-04-18	Show	GitHub Exploit DB Packet Storm

2969	6.5	警告 Adjacent	ウォッチガード・テクノロジー	WatchGuard Agent	ウォッチガード・テクノロジーのWatchGuard Agentにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-41286	2026-05-13 10:26	2026-05-6	Show	GitHub Exploit DB Packet Storm

2970	6.5	警告 Adjacent	ウォッチガード・テクノロジー	WatchGuard Agent	ウォッチガード・テクノロジーのWatchGuard Agentにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-41287	2026-05-13 10:26	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345411	-	georg_greve	spamassassin_milter_plugin	The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacter…	CWE-78 OS Command	CVE-2010-1132	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

345412	-	tiki	tikiwiki_cms\/groupware	Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchin…	CWE-89 SQL Injection	CVE-2010-1133	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

345413	-	tiki	tikiwiki_cms\/groupware	SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable.	CWE-89 SQL Injection	CVE-2010-1134	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

345414	-	tiki	tikiwiki_cms\/groupware	The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.	CWE-255 Credentials Management	CVE-2010-1135	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

345415	-	tiki	tikiwiki_cms\/groupware	The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictabl…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-1136	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

345416	-	irssi	irssi	Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certific…	CWE-20 Improper Input Validation	CVE-2010-1155	2017-08-17 10:32	2010-04-17	Show	GitHub Exploit DB Packet Storm

345417	-	irssi	irssi	core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at th…	NVD-CWE-Other	CVE-2010-1156	2017-08-17 10:32	2010-04-17	Show	GitHub Exploit DB Packet Storm

345418	-	irssi	irssi	Per: http://cwe.mitre.org/data/definitions/476.html 'NULL Pointer Dereference'	NVD-CWE-Other	CVE-2010-1156	2017-08-17 10:32	2010-04-17	Show	GitHub Exploit DB Packet Storm

345419	-	atlassian	jira	Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path an…	CWE-94 Code Injection	CVE-2010-1165	2017-08-17 10:32	2010-04-21	Show	GitHub Exploit DB Packet Storm

345420	-	atlassian	jira	Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) element or (2) defaultColor parameter …	CWE-79 Cross-site Scripting	CVE-2010-1164	2017-08-17 10:32	2010-04-21	Show	GitHub Exploit DB Packet Storm