Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3081	6.5	警告 Network	IBM	IBM DB2	IBMのIBM DB2における入力で指定された数量の不適切な検証に関する脆弱性	CWE-1284 入力で指定された数量の不適切な検証	CVE-2026-1577	2026-05-7 12:07	2026-04-30	Show	GitHub Exploit DB Packet Storm

3082	5.5	警告 Local	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21023	2026-05-7 12:06	2026-04-29	Show	GitHub Exploit DB Packet Storm

3083	4.8	警告 Network	VMware	Spring Security	VMwareのSpring SecurityにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-22751	2026-05-7 12:06	2026-04-21	Show	GitHub Exploit DB Packet Storm

3084	8.1	重要 Network	フォーティネット	FortiAnalyzer Cloud FortiManager Cloud	フォーティネットのFortiAnalyzer Cloud等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-22828	2026-05-7 12:06	2026-04-14	Show	GitHub Exploit DB Packet Storm

3085	9.8	緊急 Network	IBM	IBM i	IBMのIBM iにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-2311	2026-05-7 12:06	2026-04-30	Show	GitHub Exploit DB Packet Storm

3086	9.1	緊急 Network	Eclipse Foundation	Jetty	Eclipse FoundationのJettyにおけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-2332	2026-05-7 12:06	2026-04-14	Show	GitHub Exploit DB Packet Storm

3087	9.1	緊急 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-23500	2026-05-7 12:06	2026-04-17	Show	GitHub Exploit DB Packet Storm

3088	5.3	警告 Local	FreeType Project	FreeType	FreeType ProjectのFreeTypeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-23865	2026-05-7 12:06	2026-03-2	Show	GitHub Exploit DB Packet Storm

3089	6.5	警告 Network	Linux Foundation	tekton pipelines	Linux Foundationのtekton pipelinesにおける不正な正規表現に関する脆弱性	CWE-185 不正な正規表現	CVE-2026-25542	2026-05-7 12:06	2026-04-21	Show	GitHub Exploit DB Packet Storm

3090	6.5	警告 Adjacent	FRRouting Project	FRRouting	FRRouting ProjectのFRRoutingにおける複数の脆弱性	CWE-125 CWE-190	CVE-2026-28532	2026-05-7 12:06	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2481	8.2	HIGH Network	-	-	Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attacke…	CWE-89 SQL Injection	CVE-2018-25379	2026-05-27 04:47	2026-05-26	Show	GitHub Exploit DB Packet Storm

2482	7.1	HIGH Network	-	-	Joomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through the filter_type_id, filter_pid_id, and filter_s…	CWE-89 SQL Injection	CVE-2018-25380	2026-05-27 04:47	2026-05-26	Show	GitHub Exploit DB Packet Storm

2483	7.1	HIGH Network	-	-	Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. Attackers can injec…	CWE-89 SQL Injection	CVE-2018-25381	2026-05-27 04:47	2026-05-26	Show	GitHub Exploit DB Packet Storm

2484	8.6	HIGH Network	powerdns	authoritative	Insufficient Validation of Names During AXFR	CWE-77 Command Injection	CVE-2026-42000	2026-05-27 04:38	2026-05-21	Show	GitHub Exploit DB Packet Storm

2485	4.3	MEDIUM Network	-	-	Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft H…	CWE-352 Origin Validation Error	CVE-2018-25343	2026-05-27 04:37	2026-05-24	Show	GitHub Exploit DB Packet Storm

2486	8.4	HIGH Local	-	-	10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary code by triggering …	CWE-121 Stack-based Buffer Overflow	CVE-2018-25344	2026-05-27 04:37	2026-05-24	Show	GitHub Exploit DB Packet Storm

2487	8.4	HIGH Local	-	-	10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypass SafeSEH protections and execute arbitrary code. Attackers can craft…	CWE-120 Classic Buffer Overflow	CVE-2018-25345	2026-05-27 04:37	2026-05-24	Show	GitHub Exploit DB Packet Storm

2488	7.1	HIGH Network	-	-	WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through the FormMakerSQLMa…	CWE-89 SQL Injection	CVE-2018-25346	2026-05-27 04:37	2026-05-24	Show	GitHub Exploit DB Packet Storm

2489	7.1	HIGH Network	-	-	WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_f…	CWE-89 SQL Injection	CVE-2018-25347	2026-05-27 04:37	2026-05-24	Show	GitHub Exploit DB Packet Storm

2490	8.2	HIGH Network	-	-	Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attacker…	CWE-89 SQL Injection	CVE-2018-25348	2026-05-27 04:37	2026-05-24	Show	GitHub Exploit DB Packet Storm