Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4591 6.5 警告
Network 		SAP Manage Reference Structures SAPのManage Reference Structuresにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-27679 2026-05-7 11:30 2026-04-14 Show GitHub Exploit DB Packet Storm
4592 7.5 重要
Network 		Mercurycom MIPC252W Firmware MercurycomのMIPC252W FirmwareにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31256 2026-05-7 11:30 2026-04-27 Show GitHub Exploit DB Packet Storm
4593 4.9 警告
Network 		Anviz Global Anviz CX7 Firmware Anviz GlobalのAnviz CX7 Firmwareにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-31927 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
4594 7.7 重要
Local 		Anviz Global Anviz CX7 Firmware Anviz GlobalのAnviz CX7 Firmwareにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2026-32324 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
4595 5.3 警告
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-32648 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
4596 7.5 重要
Network 		Anviz Global Crosschex Standard Anviz GlobalのCrosschex Standardにおけるアルゴリズムのダウングレードに関する脆弱性 CWE-757
アルゴリズムのダウングレード 		CVE-2026-32650 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
4597 5.3 警告
Network 		Anviz Global Anviz CX7 Firmware Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-33093 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
4598 6.5 警告
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-33569 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
4599 4.3 警告
Network 		SAP SAP HANA Database Explorer
SAP HANA Cockpit 		SAPのSAP HANA Cockpit等の複数製品における認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-34262 2026-05-7 11:30 2026-04-14 Show GitHub Exploit DB Packet Storm
4600 5.3 警告
Network 		Anviz Global Anviz CX7 Firmware Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-35061 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346681 - ocsinventory-ng ocs_inventory_ng Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the … CWE-79
Cross-site Scripting 		CVE-2010-1594 2017-08-17 10:32 2010-04-29 Show GitHub Exploit DB Packet Storm
346682 - ocsinventory-ng ocs_inventory_ng Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val_1, or (3) onglet_bis paramete… CWE-89
SQL Injection 		CVE-2010-1595 2017-08-17 10:32 2010-04-29 Show GitHub Exploit DB Packet Storm
346683 - sitracker support_incident_tracker Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password. CWE-287
Improper Authentication 		CVE-2010-1596 2017-08-17 10:32 2010-04-29 Show GitHub Exploit DB Packet Storm
346684 - zipgenius zipgenius Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing an entry with a long filename. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1597 2017-08-17 10:32 2010-04-30 Show GitHub Exploit DB Packet Storm
346685 - silisoftware phpthumb\(\) phpThumb.php in phpThumb() 1.7.9 and possibly other versions, when ImageMagick is installed, allows remote attackers to execute arbitrary commands via the fltr[] parameter, as discovered in the wild … CWE-20
 Improper Input Validation  		CVE-2010-1598 2017-08-17 10:32 2010-04-30 Show GitHub Exploit DB Packet Storm
346686 - nkinfoweb nkinfoweb SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the id_sp parameter. CWE-89
SQL Injection 		CVE-2010-1599 2017-08-17 10:32 2010-04-30 Show GitHub Exploit DB Packet Storm
346687 - thefactory com_mediamall SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php. CWE-89
SQL Injection 		CVE-2010-1600 2017-08-17 10:32 2010-04-30 Show GitHub Exploit DB Packet Storm
346688 - joomlamart com_jacomment Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. CWE-22
Path Traversal 		CVE-2010-1601 2017-08-17 10:32 2010-04-30 Show GitHub Exploit DB Packet Storm
346689 - ncrypted nct_jobs_portal_script Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the (1) user parameter (aka login field) and (2) passw… CWE-89
SQL Injection 		CVE-2010-1604 2017-08-17 10:32 2010-04-30 Show GitHub Exploit DB Packet Storm
346690 - ncrypted nct_jobs_portal_script Multiple SQL injection vulnerabilities in isearch.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the (1) anyword and (2) cityname parameters. NOTE: the pr… CWE-89
SQL Injection 		CVE-2010-1605 2017-08-17 10:32 2010-04-30 Show GitHub Exploit DB Packet Storm