Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2961	7.5	重要 Network	Eugene Pankov	Ajenti Plugin Core	Eugene PankovのAjenti Plugin Coreにおける認証に関する脆弱性	CWE-287 CWE-noinfo	CVE-2026-40177	2026-04-23 10:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

2962	5.9	警告 Network	Eugene Pankov	Ajenti Plugin Core	Eugene PankovのAjenti Plugin Coreにおける複数の脆弱性	CWE-287 CWE-362	CVE-2026-40178	2026-04-23 10:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

2963	5.3	警告 Network	Maurice (mauriceboe)	trek	Maurice (mauriceboe)のtrekにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-40184	2026-04-23 10:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

2964	6.5	警告 Network	Maurice (mauriceboe)	trek	Maurice (mauriceboe)のtrekにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-40185	2026-04-23 10:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

2965	6.5	警告 Network	Stig (stigtsp)	Net::CIDR::Lite	Stig (stigtsp)のNet::CIDR::Liteにおけるレングスパラメーターの不整合による処理に関する脆弱性	CWE-130 レングスパラメーターの不整合による不適切な処理	CVE-2026-40198 CVE-2026-40199	2026-04-23 10:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

2966	6.5	警告 Network	Arcane	Arcane	GetarcaneのArcaneにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-40242	2026-04-23 10:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

2967	6.4	警告 Network	runZero	runZero Platform	runZeroのrunZero PlatformにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-5372	2026-04-23 10:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

2968	8.4	重要 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-5373	2026-04-23 10:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

2969	5.8	警告 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-5374	2026-04-23 10:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

2970	2.7	低 Network	runZero	runZero Platform	runZeroのrunZero Platformにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-5375	2026-04-23 10:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347181	-	enanocms	enanocms	SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameter…	CWE-89 SQL Injection	CVE-2010-0471	2010-06-23 13:00	2010-02-3	Show	GitHub Exploit DB Packet Storm

347182	-	opencart	opencart	SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.	CWE-89 SQL Injection	CVE-2010-0956	2010-06-23 13:00	2010-03-11	Show	GitHub Exploit DB Packet Storm

347183	-	apple	safari	Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie Miller during a Pwn2Own competition at C…	CWE-94 Code Injection	CVE-2010-1120	2010-06-23 13:00	2010-03-26	Show	GitHub Exploit DB Packet Storm

347184	-	gnudip	gnudip	SQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP 2.1.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from …	CWE-89 SQL Injection	CVE-2009-4720	2010-06-23 13:00	2010-03-19	Show	GitHub Exploit DB Packet Storm

347185	-	intersystems	cache_database	Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' 4.0.3 through 5.0.5 allows remote attackers to "gain complete control" of a server.	NVD-CWE-noinfo	CVE-2003-1333	2010-06-23 13:00	2003-12-31	Show	GitHub Exploit DB Packet Storm

347186	-	kai_blankenhorn_bitfolge	simple_and_nice_index_file	Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified …	CWE-79 Cross-site Scripting	CVE-2003-1334	2010-06-23 13:00	2003-12-31	Show	GitHub Exploit DB Packet Storm

347187	-	kai_blankenhorn_bitfolge	simple_and_nice_index_file	Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.5 allows remote attackers to download files from locations above the snif directory.	CWE-22 Path Traversal	CVE-2003-1335	2010-06-23 13:00	2003-12-31	Show	GitHub Exploit DB Packet Storm

347188	-	aprelium_technologies	abyss_web_server	CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequ…	NVD-CWE-Other	CVE-2003-1338	2010-06-23 13:00	2003-12-31	Show	GitHub Exploit DB Packet Storm

347189	-	aprelium_technologies	abyss_web_server	Per: http://cwe.mitre.org/data/definitions/93.html 'http://cwe.mitre.org/data/definitions/93.html'	NVD-CWE-Other	CVE-2003-1338	2010-06-23 13:00	2003-12-31	Show	GitHub Exploit DB Packet Storm

347190	-	apple	mac_os_x mac_os_x_server	Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open…	CWE-287 Improper Authentication	CVE-2010-0521	2010-06-21 13:00	2010-03-31	Show	GitHub Exploit DB Packet Storm