Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245651 10 危険 Axesstel - Axesstel MV におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2317 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
245652 7.5 危険 bow der kleine - X-BLC の include/get_read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2310 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245653 7.5 危険 codice-cms - Codice CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2309 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245654 7.5 危険 armassa - ARD-9808 DVR カードセキュリティカメラにおけるユーザ名とパスワードを含むファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2306 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245655 7.8 危険 armassa - ARD-9808 DVR カードセキュリティカメラにおけるサービス運用妨害の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2305 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245656 5 警告 avatic - Aardvark Topsites PHP の index.php における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2304 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245657 5 警告 avatic - Aardvark Topsites PHP の index.php における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2303 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245658 4.3 警告 avatic - Aardvark Topsites の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2302 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245659 5 警告 artofdefence
Apache Software Foundation		 - Apache HTTP Server の Artofdefence Hyperguard WAF におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2299 2012-06-26 16:10 2009-07-2 Show GitHub Exploit DB Packet Storm
245660 7.5 危険 dillo - Dillo の Png_datainfo_callback 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2294 2012-06-26 16:10 2009-07-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2251 9.6 CRITICAL
Network 		- - Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium) CWE-787
 Out-of-bounds Write 		CVE-2026-11037 2026-06-6 02:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2252 6.5 MEDIUM
Network 		- - CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial … CWE-20
 Improper Input Validation  		CVE-2025-5090 2026-06-6 02:16 2026-06-6 Show GitHub Exploit DB Packet Storm
2253 6.5 MEDIUM
Network 		- - In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from the connected CVX server. Similarly, the CVX server is not resilient to certain … CWE-20
 Improper Input Validation  		CVE-2025-5089 2026-06-6 02:16 2026-06-6 Show GitHub Exploit DB Packet Storm
2254 8.3 HIGH
Network 		- - An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to the Redis service on… CWE-269
 Improper Privilege Management 		CVE-2025-5088 2026-06-6 02:16 2026-06-6 Show GitHub Exploit DB Packet Storm
2255 5.5 MEDIUM
Local 		linaro op-tee OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.3.0 and prior t… CWE-843
Type Confusion 		CVE-2026-45702 2026-06-6 01:56 2026-06-4 Show GitHub Exploit DB Packet Storm
2256 7.5 HIGH
Network 		microsoft exchange_online Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. CWE-285
Improper Authorization 		CVE-2026-48579 2026-06-6 01:51 2026-06-5 Show GitHub Exploit DB Packet Storm
2257 8.8 HIGH
Network 		dlink dwr-m920_firmware A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument action_value results in… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-10878 2026-06-6 01:48 2026-06-5 Show GitHub Exploit DB Packet Storm
2258 3.1 LOW
Network 		google chrome Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy… CWE-20
 Improper Input Validation  		CVE-2026-11244 2026-06-6 01:43 2026-06-5 Show GitHub Exploit DB Packet Storm
2259 5.4 MEDIUM
Network 		google chrome Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) CWE-346
 Origin Validation Error 		CVE-2026-11243 2026-06-6 01:43 2026-06-5 Show GitHub Exploit DB Packet Storm
2260 9.8 CRITICAL
Network 		microsoft azure_horizondb Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network. CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-48567 2026-06-6 01:30 2026-06-5 Show GitHub Exploit DB Packet Storm