Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4411	9.1	緊急 Network	Canonical	LXD	CanonicalのLXDにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-34177	2026-04-24 11:30	2026-04-9	Show	GitHub Exploit DB Packet Storm

4412	9.1	緊急 Network	Canonical	LXD	CanonicalのLXDにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-34178	2026-04-24 11:30	2026-04-9	Show	GitHub Exploit DB Packet Storm

4413	9.1	緊急 Network	Canonical	LXD	CanonicalのLXDにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-34179	2026-04-24 11:30	2026-04-9	Show	GitHub Exploit DB Packet Storm

4414	5.4	警告 Network	Docmost	Docmost	Docmostにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-34212	2026-04-24 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

4415	5.4	警告 Network	Docmost	Docmost	Docmostにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-34213	2026-04-24 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

4416	6.5	警告 Network	オラクル	PeopleSoft Enterprise HCM Absence Management	オラクルのPeopleSoft Enterprise HCM Absence Managementにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34266	2026-04-24 11:30	2026-04-21	Show	GitHub Exploit DB Packet Storm

4417	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34267	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4418	6.1	警告 Network	オラクル	PeopleSoft Enterprise PeopleTools	オラクルのPeopleSoft Enterprise PeopleToolsにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34269	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4419	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34270	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4420	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34271	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349391	-	hitachi	ucosminexus\/opentp1_web_web_front-endset ucosminexus_application_server ucosminexus_client ucosminexus_collaboration ucosminexus_developer ucosminexus_operator ucosminexus_service_…	Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C+…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4776	2010-06-7 13:00	2010-04-21	Show	GitHub Exploit DB Packet Storm

349392	-	kolab	kolab_server	Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form."	NVD-CWE-noinfo	CVE-2009-4824	2010-06-5 14:31	2010-04-28	Show	GitHub Exploit DB Packet Storm

349393	-	zeeways	ebay_clone_auction_script	Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of th…	CWE-79 Cross-site Scripting	CVE-2010-2144	2010-06-4 13:00	2010-06-3	Show	GitHub Exploit DB Packet Storm

349394	-	graviton-mediatech	visitor_logger	PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VL_include_path parameter.	CWE-94 Code Injection	CVE-2010-2146	2010-06-4 13:00	2010-06-3	Show	GitHub Exploit DB Packet Storm

349395	-	fujitsu	e-pares	Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01 L01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-2150	2010-06-4 13:00	2010-06-4	Show	GitHub Exploit DB Packet Storm

349396	-	fujitsu	e-pares	Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for requests that modify …	CWE-352 Origin Validation Error	CVE-2010-2151	2010-06-4 13:00	2010-06-4	Show	GitHub Exploit DB Packet Storm

349397	-	tecnick	tcexam	Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an exe…	NVD-CWE-Other	CVE-2010-2153	2010-06-4 13:00	2010-06-4	Show	GitHub Exploit DB Packet Storm

349398	-	tecnick	tcexam	Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type'	NVD-CWE-Other	CVE-2010-2153	2010-06-4 13:00	2010-06-4	Show	GitHub Exploit DB Packet Storm

349399	-	dovecot	dovecot	Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message.	CWE-399 Resource Management Errors	CVE-2010-0745	2010-06-3 14:54	2010-05-21	Show	GitHub Exploit DB Packet Storm

349400	-	barnowl	barnowl	Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-0793	2010-06-3 14:54	2010-03-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed