Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4651 9.1 緊急
Network 		レッドハット
GNU Project		 GnuTLS
Red Hat Enterprise Linux
Red Hat OpenShift Container Platform 		GNU Project等の複数ベンダの製品における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-33845 2026-05-7 11:27 2026-04-30 Show GitHub Exploit DB Packet Storm
4652 5.3 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-33857 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
4653 5.3 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける複数の脆弱性 CWE-125
CWE-170
CVE-2026-34032 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
4654 7.5 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-34059 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
4655 6.5 警告
Network 		SAP human capital management SAPのhuman capital managementにおけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい 		CVE-2026-34264 2026-05-7 11:27 2026-04-14 Show GitHub Exploit DB Packet Storm
4656 7.5 重要
Network 		Go JOSE project Go JOSE Go JOSE projectのGo JOSEにおけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外 		CVE-2026-34986 2026-05-7 11:27 2026-04-6 Show GitHub Exploit DB Packet Storm
4657 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける関数の戻り値に対する不適切なチェックに関する脆弱性 CWE-253
関数の戻り値に対する不適切なチェック 		CVE-2026-35339 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
4658 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける関数の戻り値に対する不適切なチェックに関する脆弱性 CWE-253
関数の戻り値に対する不適切なチェック 		CVE-2026-35340 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
4659 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル 		CVE-2026-35342 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
4660 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装 		CVE-2026-35343 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346581 - comscripts web_server_creator_web_portal Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php. CWE-79
Cross-site Scripting 		CVE-2010-1113 2017-08-17 10:32 2010-03-26 Show GitHub Exploit DB Packet Storm
346582 - comscripts web_server_creator_web_portal Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) pg parameter to index.php and the (… CWE-94
Code Injection 		CVE-2010-1114 2017-08-17 10:32 2010-03-26 Show GitHub Exploit DB Packet Storm
346583 - comscripts web_server_creator_web_portal Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter. CWE-22
Path Traversal 		CVE-2010-1115 2017-08-17 10:32 2010-03-26 Show GitHub Exploit DB Packet Storm
346584 - aspindir lookmer_muzik_portal LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarki… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1116 2017-08-17 10:32 2010-03-26 Show GitHub Exploit DB Packet Storm
346585 - georg_greve spamassassin_milter_plugin The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacter… CWE-78
OS Command  		CVE-2010-1132 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
346586 - tiki tikiwiki_cms\/groupware Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchin… CWE-89
SQL Injection 		CVE-2010-1133 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
346587 - tiki tikiwiki_cms\/groupware SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable. CWE-89
SQL Injection 		CVE-2010-1134 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
346588 - tiki tikiwiki_cms\/groupware The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse. CWE-255
Credentials Management 		CVE-2010-1135 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
346589 - tiki tikiwiki_cms\/groupware The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictabl… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1136 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
346590 - irssi irssi Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certific… CWE-20
 Improper Input Validation  		CVE-2010-1155 2017-08-17 10:32 2010-04-17 Show GitHub Exploit DB Packet Storm