Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5741	5.9	警告 Network	Elasticsearch B.V.	Elastic Package Registry	Elasticsearch B.V.のElastic Package Registryにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-33467	2026-05-7 10:53	2026-04-28	Show	GitHub Exploit DB Packet Storm

5742	4.4	警告 Local	Mercurycom	MIPC252W Firmware	MercurycomのMIPC252W Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-35901	2026-05-7 10:53	2026-04-27	Show	GitHub Exploit DB Packet Storm

5743	6.2	警告 Local	Mercurycom	MIPC252W Firmware	MercurycomのMIPC252W Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-35902	2026-05-7 10:53	2026-04-27	Show	GitHub Exploit DB Packet Storm

5744	9.8	緊急 Network	Mercurycom	MIPC252W Firmware	MercurycomのMIPC252W Firmwareにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-35903	2026-05-7 10:53	2026-04-27	Show	GitHub Exploit DB Packet Storm

5745	4.8	警告 Network	Apache Software Foundation	Apache Storm Prometheus Reporter	Apache Software FoundationのApache Storm Prometheus Reporterにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-40557	2026-05-7 10:53	2026-04-27	Show	GitHub Exploit DB Packet Storm

5746	8.8	重要 Network	minerva	minerva	Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-5779	2026-05-7 10:53	2026-04-28	Show	GitHub Exploit DB Packet Storm

5747	8.1	重要 Network	minerva	minerva	Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-5780	2026-05-7 10:52	2026-04-28	Show	GitHub Exploit DB Packet Storm

5748	8.8	重要 Network	Frappe	ERPNext	FrappeのERPNextにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2023-54345	2026-05-7 10:52	2026-05-5	Show	GitHub Exploit DB Packet Storm

5749	7.5	重要 Network	OpenEMR	OpenEMR	OpenEMRにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2023-54347	2026-05-7 10:52	2026-05-5	Show	GitHub Exploit DB Packet Storm

5750	7.2	重要 Network	デル	data domain operating system	デルのdata domain operating systemにおける認証に関する脆弱性	CWE-287 CWE-noinfo	CVE-2025-46607	2026-05-7 10:52	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347731	-	georg_greve	spamassassin_milter_plugin	The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacter…	CWE-78 OS Command	CVE-2010-1132	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

347732	-	tiki	tikiwiki_cms\/groupware	Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchin…	CWE-89 SQL Injection	CVE-2010-1133	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

347733	-	tiki	tikiwiki_cms\/groupware	SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable.	CWE-89 SQL Injection	CVE-2010-1134	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

347734	-	tiki	tikiwiki_cms\/groupware	The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.	CWE-255 Credentials Management	CVE-2010-1135	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

347735	-	tiki	tikiwiki_cms\/groupware	The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictabl…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-1136	2017-08-17 10:32	2010-03-28	Show	GitHub Exploit DB Packet Storm

347736	-	irssi	irssi	Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certific…	CWE-20 Improper Input Validation	CVE-2010-1155	2017-08-17 10:32	2010-04-17	Show	GitHub Exploit DB Packet Storm

347737	-	irssi	irssi	core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at th…	NVD-CWE-Other	CVE-2010-1156	2017-08-17 10:32	2010-04-17	Show	GitHub Exploit DB Packet Storm

347738	-	irssi	irssi	Per: http://cwe.mitre.org/data/definitions/476.html 'NULL Pointer Dereference'	NVD-CWE-Other	CVE-2010-1156	2017-08-17 10:32	2010-04-17	Show	GitHub Exploit DB Packet Storm

347739	-	atlassian	jira	Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path an…	CWE-94 Code Injection	CVE-2010-1165	2017-08-17 10:32	2010-04-21	Show	GitHub Exploit DB Packet Storm

347740	-	atlassian	jira	Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) element or (2) defaultColor parameter …	CWE-79 Cross-site Scripting	CVE-2010-1164	2017-08-17 10:32	2010-04-21	Show	GitHub Exploit DB Packet Storm