Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3071	5.3	警告 Network	Python Software Foundation	urllib3	Python Software Foundationのurllib3における情報漏えいに関する脆弱性	CWE-200 CWE-noinfo	CVE-2026-44431	2026-05-18 12:12	2026-05-13	Show	GitHub Exploit DB Packet Storm

3072	7.5	重要 Network	Python Software Foundation	urllib3	Python Software Foundationのurllib3における高圧縮データの処理 (データ増幅)に関する脆弱性	CWE-409 高圧縮データの不適切な処理 (データ増幅)	CVE-2026-44432	2026-05-18 12:12	2026-05-13	Show	GitHub Exploit DB Packet Storm

3073	5.7	警告 Adjacent	Frappe	ERPNext	FrappeのERPNextにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-44440	2026-05-18 12:12	2026-05-13	Show	GitHub Exploit DB Packet Storm

3074	4.3	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-44441	2026-05-18 12:12	2026-05-13	Show	GitHub Exploit DB Packet Storm

3075	9.9	緊急 Network	Frappe	ERPNext	FrappeのERPNextにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-44442	2026-05-18 12:12	2026-05-13	Show	GitHub Exploit DB Packet Storm

3076	6.5	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-44445	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

3077	7.5	重要 Network	Frappe	ERPNext	FrappeのERPNextにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-44446	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

3078	7.5	重要 Network	Frappe	ERPNext	FrappeのERPNextにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-44447	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

3079	5.4	警告 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける解釈の競合に関する脆弱性	CWE-436 解釈の競合	CVE-2026-44576	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

3080	8.6	重要 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-44578	2026-05-18 12:11	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312211	-		oracle	opensso_enterprise	Unspecified vulnerability in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors.	NVD-CWE-noinfo	CVE-2009-3762	2024-11-21 10:08	2010-07-14	Show	GitHub Exploit DB Packet Storm

312212	-		oracle	opensso_enterprise	Unspecified vulnerability in the OpenSSO component in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors.	NVD-CWE-noinfo	CVE-2009-3764	2024-11-21 10:08	2010-07-14	Show	GitHub Exploit DB Packet Storm

312213	-		oracle	opensso_enterprise	Unspecified vulnerability in the Access Manager / OpenSSO component in Oracle OpenSSO Enterprise 7.1, 7, 2005Q4, and 8.0 allows remote attackers to affect integrity via unknown vectors.	NVD-CWE-noinfo	CVE-2009-3763	2024-11-21 10:08	2010-07-14	Show	GitHub Exploit DB Packet Storm

312214	-		adobe macromedia	flash_player air	Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or po…	CWE-399 NVD-CWE-noinfo Resource Management Errors	CVE-2009-3793	2024-11-21 10:08	2010-06-16	Show	GitHub Exploit DB Packet Storm

312215	3.3	LOW Local	noping debian	liboping debian_linux	liboping 1.3.2 allows users reading arbitrary files upon the local system.	CWE-20 Improper Input Validation	CVE-2009-3614	2024-11-21 10:07	2019-11-9	Show	GitHub Exploit DB Packet Storm

312216	3.1	LOW Adjacent	redhat	enterprise_virtualization_manager	In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAM…	CWE-295 Improper Certificate Validation	CVE-2009-3552	2024-11-21 10:07	2019-11-9	Show	GitHub Exploit DB Packet Storm

312217	-		vmware	hyperic_hq	The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments.	CWE-200 Information Exposure	CVE-2009-2899	2024-11-21 10:06	2012-12-6	Show	GitHub Exploit DB Packet Storm

312218	-		symantec	altiris_deployment_solution altiris_notification_server management_platform	The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x expos…	NVD-CWE-Other	CVE-2009-3028	2024-11-21 10:06	2011-03-8	Show	GitHub Exploit DB Packet Storm

312219	6.1	MEDIUM Network	mantisbt	mantisbt	MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks.	CWE-79 Cross-site Scripting	CVE-2009-2802	2024-11-21 10:05	2019-11-9	Show	GitHub Exploit DB Packet Storm

312220	-		ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary…	CWE-79 Cross-site Scripting	CVE-2009-2748	2024-11-21 10:05	2011-10-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed