Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5081 4.3 警告
Network 		SAP SAP HANA Database Explorer
SAP HANA Cockpit 		SAPのSAP HANA Cockpit等の複数製品における認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-34262 2026-05-7 11:30 2026-04-14 Show GitHub Exploit DB Packet Storm
5082 5.3 警告
Network 		Anviz Global Anviz CX7 Firmware Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-35061 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
5083 9.8 緊急
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35546 2026-05-7 11:30 2026-04-17 Show GitHub Exploit DB Packet Storm
5084 8.8 重要
Network 		Anviz Global Anviz CX2 Lite Firmware Anviz GlobalのAnviz CX2 Lite Firmwareにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-35682 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
5085 7.5 重要
Network 		Belkin International N300 firmware U-SpeedのN300 Firmwareにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-36958 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
5086 7.5 重要
Network 		Belkin International N300 firmware U-SpeedのN300 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-36959 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
5087 8.8 重要
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品におけるダウンロードしたコードの完全性検証不備に関する脆弱性 CWE-494
ダウンロードしたコードの完全性検証不備 		CVE-2026-40066 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
5088 8.1 重要
Adjacent 		Anviz Global Crosschex Standard Anviz GlobalのCrosschex Standardにおける通信チャネルの送信元の不適切な検証に関する脆弱性 CWE-940
通信チャネルの送信元の不適切な検証 		CVE-2026-40434 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
5089 7.5 重要
Network 		Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware 		Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-40461 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
5090 5.3 警告
Network 		asrmicro ASR1901 Firmware
ASR1903 Firmware 		asrmicroのASR1901 Firmware等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42800 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355521 - openttd openttd OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code v… CWE-94
Code Injection 		CVE-2010-0402 2010-05-5 22:22 2010-05-5 Show GitHub Exploit DB Packet Storm
355522 - mochasoft mocha_w32_lpd Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted "recieve jobs" request. NOT… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-1687 2010-05-5 13:00 2010-05-5 Show GitHub Exploit DB Packet Storm
355523 - joomlacomponent.inetlanka com_drawroot Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified othe… CWE-22
Path Traversal 		CVE-2010-1723 2010-05-5 13:00 2010-05-5 Show GitHub Exploit DB Packet Storm
355524 - cisco router_and_security_device_manager Cross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467. CWE-79
Cross-site Scripting 		CVE-2010-0594 2010-05-5 01:00 2010-05-5 Show GitHub Exploit DB Packet Storm
355525 - rocky.nu php_video_battle_script SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL commands via the cat parameter. CWE-89
SQL Injection 		CVE-2010-1701 2010-05-5 01:00 2010-05-5 Show GitHub Exploit DB Packet Storm
355526 - rocky.nu modelbook SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum parameter. CWE-89
SQL Injection 		CVE-2010-1705 2010-05-5 01:00 2010-05-5 Show GitHub Exploit DB Packet Storm
355527 - piwigo piwigo Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address pa… CWE-79
Cross-site Scripting 		CVE-2010-1707 2010-05-5 01:00 2010-05-5 Show GitHub Exploit DB Packet Storm
355528 - cpanel cpanel Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter. CWE-79
Cross-site Scripting 		CVE-2009-4823 2010-05-4 14:49 2010-04-28 Show GitHub Exploit DB Packet Storm
355529 - ffmpeg ffmpeg Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that triggers an out-of-bound… CWE-189
Numeric Errors 		CVE-2009-4631 2010-05-4 14:48 2010-02-10 Show GitHub Exploit DB Packet Storm
355530 - ffmpeg ffmpeg Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. CWE-189
Numeric Errors 		CVE-2009-4638 2010-05-4 14:48 2010-02-10 Show GitHub Exploit DB Packet Storm