Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3901	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2023-53684	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3902	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2023-53685	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3903	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2023-53686	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3904	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2023-53687	2026-02-5 15:47	2025-10-7	Show	GitHub Exploit DB Packet Storm

3905	9.8	緊急 Network	eXtplorer	eXtplorer	eXtplorerにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2023-54335	2026-02-5 15:47	2026-01-13	Show	GitHub Exploit DB Packet Storm

3906	7.5	重要 Network	Progress Software Corporation	MOVEit Transfer	Progress Software CorporationのMOVEit Transferにおける未検証のパスワード変更に関する脆弱性	CWE-620 未検証のパスワード変更	CVE-2025-11235	2026-02-5 15:47	2026-01-7	Show	GitHub Exploit DB Packet Storm

3907	8.8	重要 Network	デル	Dell Unisphere for PowerMax Virtual Appliance Dell Unisphere for PowerMax	デルのDell Unisphere for PowerMax等の複数製品におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-36588	2026-02-5 15:46	2026-01-22	Show	GitHub Exploit DB Packet Storm

3908	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2025-39954	2026-02-5 15:46	2025-10-9	Show	GitHub Exploit DB Packet Storm

3909	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-39955	2026-02-5 15:46	2025-10-9	Show	GitHub Exploit DB Packet Storm

3910	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-39956	2026-02-5 15:46	2025-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348521	-	percha	com_perchagallery	Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact v…	CWE-22 Path Traversal	CVE-2010-2035	2010-05-26 13:00	2010-05-25	Show	GitHub Exploit DB Packet Storm

348522	-	percha	com_perchadownloadsattach	Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified ot…	CWE-22 Path Traversal	CVE-2010-2037	2010-05-26 13:00	2010-05-25	Show	GitHub Exploit DB Packet Storm

348523	-	shopex	ecshop	SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter. NOTE: some of these details are obtained from third part…	CWE-89 SQL Injection	CVE-2010-2042	2010-05-26 13:00	2010-05-25	Show	GitHub Exploit DB Packet Storm

348524	-	activehelper	com_activehelper_livehelp	Multiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp (com_activehelper_livehelp) component 2.0.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML …	CWE-79 Cross-site Scripting	CVE-2010-2046	2010-05-26 13:00	2010-05-26	Show	GitHub Exploit DB Packet Storm

348525	-	manageengine	adaudit_plus	Cross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the rep…	CWE-79 Cross-site Scripting	CVE-2010-2049	2010-05-26 13:00	2010-05-26	Show	GitHub Exploit DB Packet Storm

348526	-	debliteck	dbcart	SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-2051	2010-05-26 13:00	2010-05-26	Show	GitHub Exploit DB Packet Storm

348527	-	andreas_schwarzkopf	accessibility_glossary	SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2009-4803	2010-05-26 13:00	2010-04-23	Show	GitHub Exploit DB Packet Storm

348528	-	andreas_schwarzkopf	accessibility_glossary	A fix for this vulnerability was included in 0.4.11. The latest release can be downloaded at: http://typo3.org/extensions/repository/view/a21glossary/current/	CWE-89 SQL Injection	CVE-2009-4803	2010-05-26 13:00	2010-04-23	Show	GitHub Exploit DB Packet Storm

348529	-	sun	opensolaris	The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.	CWE-16 Configuration	CVE-2010-0559	2010-05-25 14:51	2010-02-6	Show	GitHub Exploit DB Packet Storm

348530	-	info-zip	unzip	Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.	NVD-CWE-Other	CVE-2001-1268	2010-05-25 13:10	2001-07-12	Show	GitHub Exploit DB Packet Storm