Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
261301 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2505 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
261302 6.9 警告 acpid - acpid の umask におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4235 2010-01-21 11:44 2009-12-7 Show GitHub Exploit DB Packet Storm
261303 6.9 警告 サイバートラスト株式会社
レッドハット
acpid
- acpid のレッドハットパッチにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4033 2010-01-21 11:43 2009-12-7 Show GitHub Exploit DB Packet Storm
261304 10 危険 アドビシステムズ - Adobe Illustrator における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2009-3952 2010-01-21 11:43 2010-01-7 Show GitHub Exploit DB Packet Storm
261305 9.3 危険 アドビシステムズ - Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2009-4195 2010-01-21 11:43 2009-12-4 Show GitHub Exploit DB Packet Storm
261306 4.4 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1337 2010-01-21 11:23 2009-04-22 Show GitHub Exploit DB Packet Storm
261307 4.9 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux Kernel における sendmsg 関数の呼び出しに関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-5300 2010-01-21 11:22 2008-12-1 Show GitHub Exploit DB Packet Storm
261308 6.8 警告 シスコシステムズ - 複数の SSL VPN (Web VPN) 製品においてウェブブラウザのセキュリティが迂回される問題 CWE-264
認可・権限・アクセス制御
CVE-2009-2631 2010-01-20 14:15 2009-12-1 Show GitHub Exploit DB Packet Storm
261309 4.4 警告 DAG
レッドハット
- dstat における Python module の検索パスに関する権限昇格の脆弱性 CWE-Other
その他
CVE-2009-3894 2010-01-20 14:15 2009-11-29 Show GitHub Exploit DB Packet Storm
261310 6.4 警告 OSIsoft - PI Server の OSIsoft PI System におけるデータベースの情報を変更される脆弱性 CWE-310
暗号の問題
CVE-2009-0209 2010-01-20 14:14 2009-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1491 7.5 HIGH
Network
- - A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning. CWE-349
 Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-33612 2026-06-26 01:00 2026-06-25 Show GitHub Exploit DB Packet Storm
1492 3.7 LOW
Network
- - An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The pr… CWE-116
 Improper Encoding or Escaping of Output
CVE-2026-40011 2026-06-26 01:00 2026-06-25 Show GitHub Exploit DB Packet Storm
1493 3.7 LOW
Network
- - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. CWE-705
 Incorrect Control Flow Scoping
CVE-2026-40208 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1494 5.3 MEDIUM
Network
- - An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a… CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2026-40209 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1495 4.8 MEDIUM
Network
- - An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash. CWE-126
 Buffer Over-read
CVE-2026-40210 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1496 5.3 MEDIUM
Network
- - An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-40211 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1497 3.7 LOW
Network
- - An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend … CWE-115
 Misinterpretation of Input
CVE-2026-42004 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1498 5.3 MEDIUM
Network
- - An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation. CWE-20
 Improper Input Validation 
CVE-2026-42390 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1499 5.9 MEDIUM
Network
- - Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail. CWE-290
 Authentication Bypass by Spoofing
CVE-2026-52690 2026-06-26 00:59 2026-06-25 Show GitHub Exploit DB Packet Storm
1500 4.7 MEDIUM
Network
google chrome Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.… CWE-346
 Origin Validation Error
CVE-2026-13034 2026-06-26 00:23 2026-06-25 Show GitHub Exploit DB Packet Storm