Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257681	7.5	危険	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-2315	2010-01-19 15:48	2008-08-1	Show	GitHub Exploit DB Packet Storm

257682	7.5	危険	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の zlib 拡張モジュールにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2008-1721	2010-01-19 15:48	2008-04-10	Show	GitHub Exploit DB Packet Storm

257683	6.8	警告	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の imageop.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-1679	2010-01-19 15:48	2008-04-22	Show	GitHub Exploit DB Packet Storm

257684	5.8	警告	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の imageop モジュールにおける複数の整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2007-4965	2010-01-19 15:47	2007-09-18	Show	GitHub Exploit DB Packet Storm

257685	7.5	危険	アップル	-	Mac OS X 用の Java における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2009-2843	2010-01-18 12:22	2009-12-3	Show	GitHub Exploit DB Packet Storm

257686	6.8	警告	アップル GNU Project サン・マイクロシステムズサイバートラスト株式会社レッドハット	-	GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-4131	2010-01-18 12:21	2007-08-23	Show	GitHub Exploit DB Packet Storm

257687	4.6	警告	IBM	-	IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4150	2010-01-15 14:10	2009-12-2	Show	GitHub Exploit DB Packet Storm

257688	2.1	注意	サン・マイクロシステムズ	-	Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4080	2010-01-15 14:10	2009-11-24	Show	GitHub Exploit DB Packet Storm

257689	5	警告	サン・マイクロシステムズ	-	Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4075	2010-01-15 14:09	2009-11-23	Show	GitHub Exploit DB Packet Storm

257690	2.6	注意	オラクル	-	Oracle Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-01-14 15:01	2010-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1661	7.1	HIGH Network	-	-	An SQL injection vulnerability exists in Mautic's API contact filtering mechanism. Due to insufficient recursive sanitization of nested query parameters, an authenticated API user can bypass input fi…	CWE-89 SQL Injection	CVE-2026-4776	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1662	6.4	MEDIUM Network	-	-	A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component. Due to insufficient validation of user-supplied URLs, an authenticated user can trigger outbound HTTP requests f…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-9557	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1663	9.9	CRITICAL Network	-	-	A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated us…	CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-9558	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1664	9.9	CRITICAL Network	-	-	A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports, a flaw in the validation logic allows file paths to escap…	CWE-22 CWE-73 CWE-98 Path Traversal External Control of File Name or Path Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-9559	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1665	7.1	HIGH Network	-	-	An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles configured with owner-scope restrictions (such as `viewown` or …	CWE-863 Incorrect Authorization	CVE-2026-9808	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1666	7.6	HIGH Network	-	-	A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views (such as campaigns, emails, or…	CWE-79 Cross-site Scripting	CVE-2026-9809	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1667	5.4	MEDIUM Network	-	-	A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system entities, the application f…	CWE-79 Cross-site Scripting	CVE-2026-9811	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1668	-		-	-	Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The affected component …	CWE-23 Relative Path Traversal	CVE-2026-8326	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1669	-		-	-	Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator configures their path w…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-9508	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

1670	-		-	-	An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending HTTP POST reques…	CWE-248 Uncaught Exception	CVE-2026-9509	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed