Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259011 4.3 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server における HTTP リクエストを非表示にされる脆弱性 CWE-Other
その他 		CVE-2003-1578 2010-02-25 12:36 2003-11-14 Show GitHub Exploit DB Packet Storm
259012 2.6 注意 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるログファイルに任意のテキストを挿入される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2003-1577 2010-02-25 12:36 2003-11-14 Show GitHub Exploit DB Packet Storm
259013 5 警告 IBM - IBM WebSphere Application Server の Single Sign-on 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0563 2010-02-25 12:35 2010-02-5 Show GitHub Exploit DB Packet Storm
259014 5 警告 アップル - Apple Safari の WebKit における任意の Web サイトにリクエストされる脆弱性 CWE-Other
その他 		CVE-2009-2841 2010-02-25 12:33 2009-11-11 Show GitHub Exploit DB Packet Storm
259015 10 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3384 2010-02-25 12:33 2009-11-11 Show GitHub Exploit DB Packet Storm
259016 7.1 危険 Linux
レッドハット		 - Linux kernel の icmp_send 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-0778 2010-02-25 12:33 2009-03-12 Show GitHub Exploit DB Packet Storm
259017 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の audit_syscall_entry 関数におけるシステムコール監査設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0834 2010-02-25 12:33 2009-03-6 Show GitHub Exploit DB Packet Storm
259018 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の hrtimer_start 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-5966 2010-02-25 12:31 2007-12-20 Show GitHub Exploit DB Packet Storm
259019 4.3 警告 シスコシステムズ - Cisco Secure Desktop の +CSCOT+/translation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0440 2010-02-24 12:27 2010-02-1 Show GitHub Exploit DB Packet Storm
259020 6.2 警告 ヒューレット・パッカード - HP ECMT におけるデータベースにアクセスされる脆弱性 CWE-noinfo
情報不足 		CVE-2009-4184 2010-02-24 12:27 2009-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1151 6.1 MEDIUM
Network 		- - Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after… CWE-601
Open Redirect 		CVE-2026-41706 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1152 4.4 MEDIUM
Network 		- - Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.… CWE-330
 Use of Insufficiently Random Values 		CVE-2026-41701 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1153 4.8 MEDIUM
Network 		- - Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). An attacker can sup… CWE-943
 Improper Neutralization of Special Elements in Data Query Logic 		CVE-2026-41697 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1154 5.9 MEDIUM
Network 		- - Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to … CWE-943
 Improper Neutralization of Special Elements in Data Query Logic 		CVE-2026-41696 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1155 7.5 HIGH
Network 		- - Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolutio… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-41695 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1156 3.7 LOW
Network 		- - Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloa… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-41694 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1157 6.1 MEDIUM
Network 		- - Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an inva… CWE-601
Open Redirect 		CVE-2026-41008 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1158 7.6 HIGH
Network 		- - An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 throug… CWE-79
Cross-site Scripting 		CVE-2026-41003 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1159 7.3 HIGH
Adjacent 		- - An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the col… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40993 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm
1160 5.9 MEDIUM
Network 		- - When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a maliciou… CWE-611
XXE 		CVE-2026-40991 2026-06-10 09:16 2026-06-10 Show GitHub Exploit DB Packet Storm