Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1491 3.8 低
Adjacent 		日本電気 Aterm WX11000T12
Aterm WX4200D5
Aterm 19000T12BE
Aterm WX7800T8
Aterm WX5400HP
Aterm WX3000HP2
Aterm WX1800HP
Aterm GX621A1
Aterm … 		NEC Atermシリーズにおけるクロスサイトスクリプティングの脆弱性（NV26-002） CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6059 2026-05-25 15:29 2026-05-25 Show GitHub Exploit DB Packet Storm
1492 - - 日立 Hitachi Virtual Storage Platform 日立ディスクアレイシステムにおけるSVP 脆弱性対策について　(2026年3月分) - CVE-2026-23667
CVE-2026-23668
CVE-2026-23669
CVE-2026-23671
CVE-2026-23672
CVE-2026-23673
CVE-2026-23674
CVE-2026-24282
CVE-2026-24285
CVE-2026-24287
CVE-2026-24288
C… 		2026-05-25 11:30 2026-05-20 Show GitHub Exploit DB Packet Storm
1493 5.5 警告
Local 		Amazon.com, Inc. AWS API MCP Server Amazon.com, Inc.のAWS API MCP Serverにおける代替パスの保護に関する脆弱性 CWE-424
代替パスの不適切な保護 		CVE-2026-4270 2026-05-25 10:26 2026-03-16 Show GitHub Exploit DB Packet Storm
1494 6.5 警告
Network 		ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations ManagerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-44923 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
1495 5.4 警告
Network 		ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44924 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
1496 8.8 重要
Adjacent 		ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-44925 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
1497 6.1 警告
Network 		SimpleSAMLphp simplesamlphp-casserver SimpleSAMLphpのsimplesamlphp-casserverにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-65954 2026-05-25 10:26 2026-05-18 Show GitHub Exploit DB Packet Storm
1498 5.3 警告
Network 		LupinLin1 JiMeng Web MCP Server LupinLin1のJiMeng Web MCP Serverにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2025-70040 2026-05-25 10:25 2026-03-9 Show GitHub Exploit DB Packet Storm
1499 5.4 警告
Network 		ERLANG Erlang/ssh
Erlang/OTP 		ERLANGのErlang/OTP等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-23942 2026-05-25 10:25 2026-03-13 Show GitHub Exploit DB Packet Storm
1500 5.3 警告
Network 		ERLANG Erlang/ssh
Erlang/OTP 		ERLANGのErlang/OTP等の複数製品における高圧縮データの処理 (データ増幅)に関する脆弱性 CWE-409
高圧縮データの不適切な処理 (データ増幅) 		CVE-2026-23943 2026-05-25 10:25 2026-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311061 3.1 LOW
Adjacent 		redhat enterprise_virtualization_manager In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAM… CWE-295
Improper Certificate Validation  		CVE-2009-3552 2024-11-21 10:07 2019-11-9 Show GitHub Exploit DB Packet Storm
311062 - vmware hyperic_hq The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments. CWE-200
Information Exposure 		CVE-2009-2899 2024-11-21 10:06 2012-12-6 Show GitHub Exploit DB Packet Storm
311063 - symantec altiris_deployment_solution
altiris_notification_server
management_platform 		The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x expos… NVD-CWE-Other
CVE-2009-3028 2024-11-21 10:06 2011-03-8 Show GitHub Exploit DB Packet Storm
311064 6.1 MEDIUM
Network 		mantisbt mantisbt MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks. CWE-79
Cross-site Scripting 		CVE-2009-2802 2024-11-21 10:05 2019-11-9 Show GitHub Exploit DB Packet Storm
311065 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting 		CVE-2009-2748 2024-11-21 10:05 2011-10-30 Show GitHub Exploit DB Packet Storm
311066 - ibm websphere_application_server The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict acc… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-2747 2024-11-21 10:05 2011-10-30 Show GitHub Exploit DB Packet Storm
311067 - apache tomcat Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Lin… CWE-79
Cross-site Scripting 		CVE-2009-2696 2024-11-21 10:05 2010-08-6 Show GitHub Exploit DB Packet Storm
311068 4.3 MEDIUM
Network 		apple safari Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog. CWE-19
 Data Processing Errors 		CVE-2009-2197 2024-11-21 10:04 2016-03-24 Show GitHub Exploit DB Packet Storm
311069 - apple airport_express_base_station_firmware
airport_extreme_base_station_firmware
airport_express
airport_extreme
time_capsule 		The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and … CWE-399
 Resource Management Errors 		CVE-2009-2189 2024-11-21 10:04 2010-12-22 Show GitHub Exploit DB Packet Storm
311070 8.1 HIGH
Network 		mantisbt mantisbt An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., the user session is still considered valid and acti… CWE-613
 Insufficient Session Expiration 		CVE-2009-20001 2024-11-21 10:03 2021-03-8 Show GitHub Exploit DB Packet Storm