Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3331 9.8 緊急
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおける複数の脆弱性 CWE-436
CWE-918
CVE-2026-8034 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3332 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-8063 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3333 5.4 警告
Network 		MISP MISP MISPにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-8080 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3334 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
CWE-noinfo
CVE-2026-8091 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3335 8.1 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-8092 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3336 8.1 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-8093 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3337 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-8094 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3338 6.1 警告
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-8106 2026-05-13 10:21 2026-05-7 Show GitHub Exploit DB Packet Storm
3339 7.2 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC6 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC6 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8259 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
3340 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC6 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC6 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8264 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345631 - com_janews com_janews Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.p… CWE-22
Path Traversal 		CVE-2010-1219 2017-08-17 10:32 2010-03-31 Show GitHub Exploit DB Packet Storm
345632 - apache activemq Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests th… CWE-352
 Origin Validation Error 		CVE-2010-1244 2017-08-17 10:32 2010-04-6 Show GitHub Exploit DB Packet Storm
345633 - kjetiltroan webmaid_cms Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) template, (2) menu, (3) events, and … CWE-94
Code Injection 		CVE-2010-1266 2017-08-17 10:32 2010-04-7 Show GitHub Exploit DB Packet Storm
345634 - fh54 justvisual Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal seque… CWE-22
Path Traversal 		CVE-2010-1268 2017-08-17 10:32 2010-04-7 Show GitHub Exploit DB Packet Storm
345635 - phpscripte24 niedrig_gebote_pro_auktions_system_ii SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrary SQL commands via the id_auk parameter. CWE-89
SQL Injection 		CVE-2010-1269 2017-08-17 10:32 2010-04-7 Show GitHub Exploit DB Packet Storm
345636 - phpscripte24 multi_suktions_komplett_system SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter. CWE-89
SQL Injection 		CVE-2010-1270 2017-08-17 10:32 2010-04-7 Show GitHub Exploit DB Packet Storm
345637 - smart-plugs smartplugs SQL injection vulnerability in showplugs.php in smartplugs 1.3 allows remote attackers to execute arbitrary SQL commands via the domain parameter. CWE-89
SQL Injection 		CVE-2010-1271 2017-08-17 10:32 2010-04-7 Show GitHub Exploit DB Packet Storm
345638 - komputer.boo gnat-tgp PHP remote file inclusion vulnerability in includes/tgpinc.php in Gnat-TGP 1.2.20 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. CWE-94
Code Injection 		CVE-2010-1272 2017-08-17 10:32 2010-04-7 Show GitHub Exploit DB Packet Storm
345639 - webtoolkit wt Cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a red… CWE-79
Cross-site Scripting 		CVE-2010-1274 2017-08-17 10:32 2010-04-7 Show GitHub Exploit DB Packet Storm
345640 - adobe photoshop_cs4 Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1296 2017-08-17 10:32 2010-05-28 Show GitHub Exploit DB Packet Storm