Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4651 7.2 重要
Network
Artica ST Pandora FMS Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-34188 2026-04-24 11:35 2026-04-13 Show GitHub Exploit DB Packet Storm
4652 9.8 緊急
Network
Vinyl Cache
Varnish Software
varnish enterprise
Vinyl Cache
Varnish Software等の複数ベンダの製品における動作順序 (正規化前の検証) に関する脆弱性 CWE-180
不適切な動作順序 (正規化前の検証)
CVE-2026-34475 2026-04-24 11:35 2026-03-27 Show GitHub Exploit DB Packet Storm
4653 9.8 緊急
Network
GNU Project GNU C Library GNU ProjectのGNU C Libraryにおける複数の脆弱性 CWE-122
CWE-787
CVE-2026-5450 2026-04-24 11:35 2026-04-20 Show GitHub Exploit DB Packet Storm
4654 7.2 重要
Network
LibreNMS LibreNMS LibreNMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-6204 2026-04-24 11:35 2026-04-13 Show GitHub Exploit DB Packet Storm
4655 10 緊急
Network
ATRODO (Jon Gentle) Net::Dropbear ATRODO (Jon Gentle)のNet::Dropbearにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2016-6129
CVE-2018-12437
CVE-2025-15638
2026-04-24 11:35 2026-04-21 Show GitHub Exploit DB Packet Storm
4656 9.8 緊急
Network
The Perl Foundation Perl The Perl FoundationのPerlにおける不特定の脆弱性 CWE-Other
その他
CVE-2026-3381
CVE-2026-4176
2026-04-24 11:35 2026-03-29 Show GitHub Exploit DB Packet Storm
4657 5.3 警告
Network
Tokuhiro Matsuno (tokuhirom) Amon2::Plugin::Web::CSRFDefender Tokuhiro Matsuno (tokuhirom)のAmon2::Plugin::Web::CSRFDefenderにおける複数の脆弱性 CWE-338
CWE-340
CVE-2025-15604
CVE-2026-5082
2026-04-24 11:35 2026-04-8 Show GitHub Exploit DB Packet Storm
4658 7.5 重要
Network
pyLoad pyLoad pyLoadにおける複数の脆弱性 CWE-502
CWE-863
CVE-2026-33509
CVE-2026-35464
2026-04-24 11:35 2026-04-7 Show GitHub Exploit DB Packet Storm
4659 9.8 緊急
Network
Tomas Varaneckas JAD Java Decompiler Tomas VaraneckasのJAD Java Decompilerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2016-20049 2026-04-24 11:35 2026-03-28 Show GitHub Exploit DB Packet Storm
4660 6.1 警告
Network
WSO2 WSO2 API Manager WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2024-10242 2026-04-24 11:35 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349621 - squid-cache squid Per: http://cwe.mitre.org/data/definitions/476.html 'NULL Pointer Dereference' NVD-CWE-Other
CVE-2010-0639 2010-08-2 13:00 2010-02-16 Show GitHub Exploit DB Packet Storm
349622 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets … CWE-79
Cross-site Scripting
CVE-2010-1647 2010-07-30 14:48 2010-06-8 Show GitHub Exploit DB Packet Storm
349623 - mediawiki mediawiki Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for re… CWE-352
 Origin Validation Error
CVE-2010-1648 2010-07-30 14:48 2010-06-8 Show GitHub Exploit DB Packet Storm
349624 - openx openx Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/in… NVD-CWE-noinfo
CWE-287
Improper Authentication
CVE-2009-4830 2010-07-30 13:00 2010-04-28 Show GitHub Exploit DB Packet Storm
349625 - cisco ios Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service (device reload) via crafted Skinny Client Control Pro… NVD-CWE-noinfo
CVE-2010-0584 2010-07-13 14:50 2010-03-26 Show GitHub Exploit DB Packet Storm
349626 - frank-karau phpfk_php_forum Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of … CWE-79
Cross-site Scripting
CVE-2009-4677 2010-07-13 14:48 2010-03-9 Show GitHub Exploit DB Packet Storm
349627 - gnome screensaver gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to ac… NVD-CWE-Other
CVE-2009-4641 2010-07-7 13:00 2010-02-12 Show GitHub Exploit DB Packet Storm
349628 - tim_lochmueller mydashboard Cross-site scripting (XSS) vulnerability in the myDashboard (mydashboard) extension 0.1.13 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2010-1011 2010-06-25 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349629 - fr.simon_rundell pd_diocesedatabase SQL injection vulnerability in the Diocese of Portsmouth Database (pd_diocesedatabase) extension before 0.7.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vect… CWE-89
SQL Injection
CVE-2010-1013 2010-06-25 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349630 - laurent_foulloy sav_filter_abc SQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-1015 2010-06-24 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm