Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257861 4.6 警告 IBM - IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4150 2010-01-15 14:10 2009-12-2 Show GitHub Exploit DB Packet Storm
257862 2.1 注意 サン・マイクロシステムズ - Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4080 2010-01-15 14:10 2009-11-24 Show GitHub Exploit DB Packet Storm
257863 5 警告 サン・マイクロシステムズ - Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4075 2010-01-15 14:09 2009-11-23 Show GitHub Exploit DB Packet Storm
257864 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
257865 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
257866 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
257867 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
257868 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
257869 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
257870 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1261 9.8 CRITICAL
Network 		shepherdwind velocity.js Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-44966 2026-06-3 03:40 2026-05-27 Show GitHub Exploit DB Packet Storm
1262 8.2 HIGH
Network 		github enterprise_server A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insu… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-9312 2026-06-3 03:31 2026-05-27 Show GitHub Exploit DB Packet Storm
1263 7.5 HIGH
Network 		osgeo mapserver MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule, psLayer, 1); for any <Rule> carrying <ElseFil… CWE-129
CWE-476
 Improper Validation of Array Index
 NULL Pointer Dereference 		CVE-2026-45104 2026-06-3 03:19 2026-05-28 Show GitHub Exploit DB Packet Storm
1264 5.5 MEDIUM
Local 		google android In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-0069 2026-06-3 03:06 2026-06-2 Show GitHub Exploit DB Packet Storm
1265 6.5 MEDIUM
Adjacent 		qualcomm fastconnect_7800_firmware
qca7005_firmware
snapdragon_ar1_gen_1_platform_firmware
wcd9380_firmware
wcd9385_firmware
wsa8830_firmware
wsa8832_firmware
wsa8835_firmware 		Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration. CWE-1230
 Exposure of Sensitive Information Through Metadata 		CVE-2025-59601 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1266 7.8 HIGH
Local 		qualcomm snapdragon_480_5g_mobile_platform_firmware
snapdragon_480\+_5g_mobile_platform_firmware
snapdragon_6_gen_1_mobile_platform_firmware
snapdragon_6_gen_3_mobile_platform_firmware
snapdragon_… 		Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. CWE-476
 NULL Pointer Dereference 		CVE-2025-59604 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1267 7.8 HIGH
Local 		qualcomm snapdragon_g1_gen_2_gaming_platform_firmware
ar8035_firmware
csra6620_firmware
csra6640_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6800_firmware
fas… 		Memory Corruption when processing device identifier strings that exceed the expected maximum length. CWE-787
 Out-of-bounds Write 		CVE-2025-59605 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1268 7.8 HIGH
Local 		qualcomm cologne_firmware
cq7790_firmware
cq8725s_firmware
cq8750m_firmware
fastconnect_6200_firmware
wsa8840_firmware
wsa8845_firmware
wsa8845h_firmware
wsa8850_firmware
wsa8850w_f… 		Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization. CWE-476
 NULL Pointer Dereference 		CVE-2025-59606 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1269 5.5 MEDIUM
Network 		qualcomm 5g_fixed_wireless_access_platform_firmware
ar8035_firmware
csr8811_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
sxr2250p_firmware
wcd9340_firmware
wcd9370_firmwar… 		Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. CWE-126
 Buffer Over-read 		CVE-2025-59609 2026-06-3 03:00 2026-06-2 Show GitHub Exploit DB Packet Storm
1270 7.5 HIGH
Network 		ultrajson_project ultrajson UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write operation raises an excepti… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-44660 2026-06-3 03:00 2026-05-28 Show GitHub Exploit DB Packet Storm