Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3191	5.3	警告 Network	Mem0	mem0	Mem0のmem0における複数の脆弱性	CWE-306 CWE-862	CVE-2026-31245	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

3192	7.5	重要 Network	マイクロソフト	Copilot Chat (Microsoft Edge)	Copilot Chat (Microsoft Edge) の情報漏えいの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-33111	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

3193	8.1	重要 Network	マイクロソフト	Azure Monitor Action Group Notification System	Azure Monitor のアクショングループの通知システムの特権昇格の脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41105	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

3194	7.8	重要 Local	マイクロソフト	Kiota	マイクロソフトのKiotaにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41134	2026-05-18 12:05	2026-04-22	Show	GitHub Exploit DB Packet Storm

3195	8.2	重要 Network	Kata Containers	Confidential Containers Kata Containers	Kata ContainersのConfidential Containers等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-41326	2026-05-18 12:05	2026-04-24	Show	GitHub Exploit DB Packet Storm

3196	8.4	重要 Local	opentelemetry	OpenTelemetry eBPF Instrumentation	opentelemetryのOpenTelemetry eBPF Instrumentationにおける複数の脆弱性	CWE-22 CWE-59	CVE-2026-41433	2026-05-18 12:05	2026-04-24	Show	GitHub Exploit DB Packet Storm

3197	5.3	警告 Network	RedwoodSDK	RedwoodSDK	RedwoodjsのRedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-42190	2026-05-18 12:05	2026-05-8	Show	GitHub Exploit DB Packet Storm

3198	7.2	重要 Network	FileMaker, Inc	Claris FileMaker Cloud	Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker Cloudにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-43680	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

3199	7.2	重要 Network	FileMaker, Inc	Claris FileMaker Cloud	Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker CloudにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-43685	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

3200	6.5	警告 Network	Shellhub	Shellhub	Shellhubにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-44426	2026-05-18 12:05	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312241	-	hp	palm_pre_webos	Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.	CWE-94 Code Injection	CVE-2009-5097	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312242	-	khalid_baheyeldin	flag_content	Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Reason parameter.	CWE-79 Cross-site Scripting	CVE-2009-5096	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312243	-	ea-style	gbook	PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_ordner parameter.	CWE-94 Code Injection	CVE-2009-5095	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312244	-	cmsfaethon	cms_faethon	SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter.	CWE-89 SQL Injection	CVE-2009-5094	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312245	-	php4scripte	gastebuch	Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter.	CWE-22 Path Traversal	CVE-2009-5093	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312246	-	microsoft	fast_esp	Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2009-5092	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312247	-	vlinks	vlinks	SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2009-5091	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312248	-	daman371	bloggeruniverse	SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possib…	CWE-89 SQL Injection	CVE-2009-5090	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312249	-	ideacart	ideacart	Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.	CWE-22 Path Traversal	CVE-2009-5089	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312250	-	ideacart	ideacart	SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter.	CWE-89 SQL Injection	CVE-2009-5088	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm