Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229051 7.2 危険 PulseAudio - PulseAudio における権限を取得される脆弱性 CWE-362
競合状態
CVE-2009-1894 2012-12-20 19:10 2009-07-17 Show GitHub Exploit DB Packet Storm
229052 7.5 危険 PHPNUKE - Francisco Burzi PHP-Nuke の main/tracking/userLog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1842 2012-12-20 19:10 2009-06-1 Show GitHub Exploit DB Packet Storm
229053 10 危険 slsknet - Soulseek におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1830 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
229054 9.3 危険 sonicspot - Sonic Spot Audioactive Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1815 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
229055 7.5 危険 submitterscript - Submitter Script の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1813 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
229056 7.5 危険 videoscript - VideoScript.us YouTube Video Script の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1804 2012-12-20 19:10 2009-05-28 Show GitHub Exploit DB Packet Storm
229057 6.8 警告 sebastian-thiele - ST-Gallery の st_admin/gallery_output.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1799 2012-12-20 19:10 2009-05-28 Show GitHub Exploit DB Packet Storm
229058 4.3 警告 サン・マイクロシステムズ - Sun Java System Portal Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1796 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
229059 9.3 危険 stonetrip - StoneTrip Ston3D StandalonePlayer および WebPlayer の system.openURL 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2009-1792 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
229060 7.5 危険 phpdirsubmit - PHP Dir Submit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1787 2012-12-20 19:10 2009-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3931 - - - LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL back… CWE-327
CWE-347
 Use of a Broken or Risky Cryptographic Algorithm
 Improper Verification of Cryptographic Signature
CVE-2026-44699 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
3932 7.5 HIGH
Network
- - The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-44714 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
3933 9.8 CRITICAL
Network
- - MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitiz… CWE-94
Code Injection
CVE-2026-44717 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
3934 5.5 MEDIUM
Local
- - Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-46383 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
3935 8.8 HIGH
Network
google chrome Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hig… CWE-787
 Out-of-bounds Write
CVE-2026-8524 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm
3936 8.8 HIGH
Network
google chrome Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write
CVE-2026-8526 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm
3937 8.8 HIGH
Network
google chrome Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severi… CWE-20
 Improper Input Validation 
CVE-2026-8527 2026-05-19 04:42 2026-05-15 Show GitHub Exploit DB Packet Storm
3938 4.3 MEDIUM
Network
google chrome Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a … CWE-20
 Improper Input Validation 
CVE-2026-8528 2026-05-19 04:42 2026-05-15 Show GitHub Exploit DB Packet Storm
3939 6.2 MEDIUM
Local
- - Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can … CWE-120
Classic Buffer Overflow
CVE-2020-37234 2026-05-19 04:42 2026-05-17 Show GitHub Exploit DB Packet Storm
3940 6.4 MEDIUM
Network
- - NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter in the news additio… CWE-79
Cross-site Scripting
CVE-2020-37236 2026-05-19 04:42 2026-05-17 Show GitHub Exploit DB Packet Storm