Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3131	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2025-14870	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

3132	5.6	警告 Network	デル	elastic cloud storage Dell ObjectScale	デルのelastic cloud storage等の複数製品における認証回避の脆弱性	CWE-302 認証回避の脆弱性	CVE-2025-43992	2026-05-18 12:08	2026-05-11	Show	GitHub Exploit DB Packet Storm

3133	6.7	警告 Local	フォーティネット	FortiAP-U FortiAP FortiAP-W2	フォーティネットのFortiAP-U等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-53680	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3134	7.2	重要 Network	フォーティネット	FortiMail	フォーティネットのFortiMailにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-53681	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3135	8.8	重要 Network	フォーティネット	FortiOS	フォーティネットのFortiOSにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2025-53844	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3136	6.7	警告 Local	フォーティネット	FortiAP FortiAP-W2	フォーティネットのFortiAP-W2等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-53870	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3137	5.3	警告 Network	strapi	strapi	strapiにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2025-64526	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

3138	5.3	警告 Network	フォーティネット	FortiManager FortiAnalyzer	フォーティネットのFortiAnalyzer等の複数製品における潜在的に危険な関数の使用に関する脆弱性	CWE-676 潜在的に危険な関数の使用	CVE-2025-67604	2026-05-18 12:08	2026-05-12	Show	GitHub Exploit DB Packet Storm

3139	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-1184	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

3140	8.1	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるビジネスロジックエラーに関する脆弱性	CWE-840 ビジネスロジックエラー	CVE-2026-1322	2026-05-18 12:08	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312211	-		oracle	opensso_enterprise	Unspecified vulnerability in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors.	NVD-CWE-noinfo	CVE-2009-3762	2024-11-21 10:08	2010-07-14	Show	GitHub Exploit DB Packet Storm

312212	-		oracle	opensso_enterprise	Unspecified vulnerability in the OpenSSO component in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors.	NVD-CWE-noinfo	CVE-2009-3764	2024-11-21 10:08	2010-07-14	Show	GitHub Exploit DB Packet Storm

312213	-		oracle	opensso_enterprise	Unspecified vulnerability in the Access Manager / OpenSSO component in Oracle OpenSSO Enterprise 7.1, 7, 2005Q4, and 8.0 allows remote attackers to affect integrity via unknown vectors.	NVD-CWE-noinfo	CVE-2009-3763	2024-11-21 10:08	2010-07-14	Show	GitHub Exploit DB Packet Storm

312214	-		adobe macromedia	flash_player air	Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or po…	CWE-399 NVD-CWE-noinfo Resource Management Errors	CVE-2009-3793	2024-11-21 10:08	2010-06-16	Show	GitHub Exploit DB Packet Storm

312215	3.3	LOW Local	noping debian	liboping debian_linux	liboping 1.3.2 allows users reading arbitrary files upon the local system.	CWE-20 Improper Input Validation	CVE-2009-3614	2024-11-21 10:07	2019-11-9	Show	GitHub Exploit DB Packet Storm

312216	3.1	LOW Adjacent	redhat	enterprise_virtualization_manager	In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAM…	CWE-295 Improper Certificate Validation	CVE-2009-3552	2024-11-21 10:07	2019-11-9	Show	GitHub Exploit DB Packet Storm

312217	-		vmware	hyperic_hq	The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments.	CWE-200 Information Exposure	CVE-2009-2899	2024-11-21 10:06	2012-12-6	Show	GitHub Exploit DB Packet Storm

312218	-		symantec	altiris_deployment_solution altiris_notification_server management_platform	The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x expos…	NVD-CWE-Other	CVE-2009-3028	2024-11-21 10:06	2011-03-8	Show	GitHub Exploit DB Packet Storm

312219	6.1	MEDIUM Network	mantisbt	mantisbt	MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks.	CWE-79 Cross-site Scripting	CVE-2009-2802	2024-11-21 10:05	2019-11-9	Show	GitHub Exploit DB Packet Storm

312220	-		ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary…	CWE-79 Cross-site Scripting	CVE-2009-2748	2024-11-21 10:05	2011-10-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed