Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4951	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおける特権 API の不適切な使用に関する脆弱性	CWE-648 特権 API の不適切な使用	CVE-2026-41386	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4952	6.5	警告 Network	Wazuh Inc.	Wazuh	Wazuh Inc.のWazuhにおける複数の脆弱性	CWE-124 CWE-191	CVE-2026-41499	2026-05-7 12:04	2026-04-29	Show	GitHub Exploit DB Packet Storm

4953	7.7	重要 Network	getoutline	outline	getoutlineのoutlineにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-41649	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4954	7.5	重要 Network	PostgreSQL.org	PostgreSQL JDBC ドライバ	PostgreSQL.orgのPostgreSQL JDBC ドライバにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-42198	2026-05-7 12:04	2026-04-29	Show	GitHub Exploit DB Packet Storm

4955	8.1	重要 Network	FreeBSD	FreeBSD	FreeBSDにおける引用構文の無害化に関する脆弱性	CWE-149 引用構文の不適切な無害化	CVE-2026-42511	2026-05-7 12:04	2026-04-30	Show	GitHub Exploit DB Packet Storm

4956	8.1	重要 Network	FreeBSD	FreeBSD	FreeBSDにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-42512	2026-05-7 12:04	2026-04-30	Show	GitHub Exploit DB Packet Storm

4957	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-42778	2026-05-7 12:04	2026-05-1	Show	GitHub Exploit DB Packet Storm

4958	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-42779	2026-05-7 12:04	2026-05-1	Show	GitHub Exploit DB Packet Storm

4959	7.5	重要 Network	レッドハット GNOME Project	gdk-pixbuf Red Hat Enterprise Linux Server TUS Red Hat Enterprise Linux Server AUS Red Hat Enterprise Linux	GNOME Project等の複数ベンダの製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-5201	2026-05-7 12:04	2026-03-31	Show	GitHub Exploit DB Packet Storm

4960	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-5299	2026-05-7 12:04	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346971	-	hotbrackets	com_hotbrackets	SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.	CWE-89 SQL Injection	CVE-2010-0945	2017-08-17 10:32	2010-03-9	Show	GitHub Exploit DB Packet Storm

346972	-	bfs.kilu	bigforum	SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-0948	2017-08-17 10:32	2010-03-11	Show	GitHub Exploit DB Packet Storm

346973	-	dev4u	dev4u_cms	SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontent_id parameter.	CWE-89 SQL Injection	CVE-2010-0951	2017-08-17 10:32	2010-03-11	Show	GitHub Exploit DB Packet Storm

346974	-	insanevisions	onecms	SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action.	CWE-89 SQL Injection	CVE-2010-0952	2017-08-17 10:32	2010-03-11	Show	GitHub Exploit DB Packet Storm

346975	-	phpcoin	phpcoin	Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter.	CWE-22 Path Traversal	CVE-2010-0953	2017-08-17 10:32	2010-03-11	Show	GitHub Exploit DB Packet Storm

346976	-	preprojects	pre_e-learning_portal	SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter.	CWE-89 SQL Injection	CVE-2010-0954	2017-08-17 10:32	2010-03-11	Show	GitHub Exploit DB Packet Storm

346977	-	media-products	bild_flirt_community	SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2010-0955	2017-08-17 10:32	2010-03-11	Show	GitHub Exploit DB Packet Storm

346978	-	saskia_bruckner	saskias_shopsystem	Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the…	CWE-22 Path Traversal	CVE-2010-0957	2017-08-17 10:32	2010-03-11	Show	GitHub Exploit DB Packet Storm

346979	-	media-products	eros_webkatalog	SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action.	CWE-89 SQL Injection	CVE-2010-0964	2017-08-17 10:32	2010-03-17	Show	GitHub Exploit DB Packet Storm

346980	-	jevci.net	jevci_siparis_formu_scripti	Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for siparis.mdb.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0965	2017-08-17 10:32	2010-03-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed