Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5591	7.8	重要 Local	ggml.ai	llama.cpp	ggml.aiのllama.cppにおける複数の脆弱性	CWE-122 CWE-190	CVE-2026-33298	2026-05-1 10:47	2026-03-24	Show	GitHub Exploit DB Packet Storm

5592	6.1	警告 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC)	Microsoft Word の情報漏えいの脆弱性	CWE-125 境界外読み取り	CVE-2026-33822	2026-05-1 10:47	2026-04-14	Show	GitHub Exploit DB Packet Storm

5593	5.2	警告 Physics	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおけるPRNG におけるシードの不正な使用に関する脆弱性	CWE-335 PRNGにおけるシードの不正な使用	CVE-2026-3503	2026-05-1 10:47	2026-03-19	Show	GitHub Exploit DB Packet Storm

5594	9.8	緊急 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける複数の脆弱性	CWE-122 CWE-787 CWE-787	CVE-2026-3548	2026-05-1 10:47	2026-03-19	Show	GitHub Exploit DB Packet Storm

5595	5.9	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40966	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5596	8.6	重要 Network	VMware	Spring AI	VMwareのSpring AIにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-40967	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5597	7.5	重要 Adjacent	VMware	Spring Boot	VMwareのSpring Bootにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-40972	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5598	7	重要 Local	VMware	Spring Boot	VMwareのSpring Bootにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40973	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5599	7.5	重要 Network	VMware	Spring Boot	VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2026-40975	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

5600	9.1	緊急 Network	VMware	Spring Boot	VMwareのSpring Bootにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-40976	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347421	-	2daybiz	auction_script	Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the login field (aka the username parameter), and possib…	CWE-89 SQL Injection	CVE-2010-1706	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347422	-	freerealty.rwcinc	free_realty	Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password fiel…	CWE-89 SQL Injection	CVE-2010-1708	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347423	-	g5-scripts	auto-img-gallery	Multiple cross-site scripting (XSS) vulnerabilities in upload.cgi in G5-Scripts Auto-Img-Gallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pass parame…	CWE-79 Cross-site Scripting	CVE-2010-1709	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347424	-	ramoncastro	siestta	Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the idioma …	CWE-22 Path Traversal	CVE-2010-1710	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347425	-	ramoncastro	siestta	Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario paramete…	CWE-79 Cross-site Scripting	CVE-2010-1711	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347426	-	webmobo	wbnews	Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) messa…	CWE-79 Cross-site Scripting	CVE-2010-1712	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347427	-	postnuke	postnuke	SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action.	CWE-89 SQL Injection	CVE-2010-1713	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347428	-	dev.pucit.edu.pk	com_arcadegames	Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to ind…	CWE-22 Path Traversal	CVE-2010-1714	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347429	-	pucit.edu	com_onlineexam	Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the c…	CWE-22 Path Traversal	CVE-2010-1715	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm

347430	-	joomlanetprojects	com_agenda	SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to in…	CWE-89 SQL Injection	CVE-2010-1716	2017-08-17 10:32	2010-05-5	Show	GitHub Exploit DB Packet Storm