Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3191	5.3	警告 Network	Mem0	mem0	Mem0のmem0における複数の脆弱性	CWE-306 CWE-862	CVE-2026-31245	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

3192	7.5	重要 Network	マイクロソフト	Copilot Chat (Microsoft Edge)	Copilot Chat (Microsoft Edge) の情報漏えいの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-33111	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

3193	8.1	重要 Network	マイクロソフト	Azure Monitor Action Group Notification System	Azure Monitor のアクショングループの通知システムの特権昇格の脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41105	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

3194	7.8	重要 Local	マイクロソフト	Kiota	マイクロソフトのKiotaにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41134	2026-05-18 12:05	2026-04-22	Show	GitHub Exploit DB Packet Storm

3195	8.2	重要 Network	Kata Containers	Confidential Containers Kata Containers	Kata ContainersのConfidential Containers等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-41326	2026-05-18 12:05	2026-04-24	Show	GitHub Exploit DB Packet Storm

3196	8.4	重要 Local	opentelemetry	OpenTelemetry eBPF Instrumentation	opentelemetryのOpenTelemetry eBPF Instrumentationにおける複数の脆弱性	CWE-22 CWE-59	CVE-2026-41433	2026-05-18 12:05	2026-04-24	Show	GitHub Exploit DB Packet Storm

3197	5.3	警告 Network	RedwoodSDK	RedwoodSDK	RedwoodjsのRedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-42190	2026-05-18 12:05	2026-05-8	Show	GitHub Exploit DB Packet Storm

3198	7.2	重要 Network	FileMaker, Inc	Claris FileMaker Cloud	Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker Cloudにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-43680	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

3199	7.2	重要 Network	FileMaker, Inc	Claris FileMaker Cloud	Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker CloudにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-43685	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

3200	6.5	警告 Network	Shellhub	Shellhub	Shellhubにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-44426	2026-05-18 12:05	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312251	-	geovision	digital_surveillance_system	Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET request.	CWE-22 Path Traversal	CVE-2009-5087	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312252	-	juniper	idp	Cross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2009-5086	2024-11-21 10:11	2011-09-3	Show	GitHub Exploit DB Packet Storm

312253	-	libpng	libpng	Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a J…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2009-5063	2024-11-21 10:11	2011-09-1	Show	GitHub Exploit DB Packet Storm

312254	-	ibm	tivoli_federated_identity_manager	IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-par…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-5085	2024-11-21 10:11	2011-08-13	Show	GitHub Exploit DB Packet Storm

312255	-	ibm	tivoli_federated_identity_manager	IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a passwor…	CWE-310 Cryptographic Issues	CVE-2009-5084	2024-11-21 10:11	2011-08-13	Show	GitHub Exploit DB Packet Storm

312256	-	ibm	tivoli_federated_identity_manager	IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an Op…	CWE-287 Improper Authentication	CVE-2009-5083	2024-11-21 10:11	2011-08-13	Show	GitHub Exploit DB Packet Storm

312257	-	gnu	groff	The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes i…	CWE-59 Link Following	CVE-2009-5082	2024-11-21 10:11	2011-07-1	Show	GitHub Exploit DB Packet Storm

312258	-	gnu	groff	The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the te…	CWE-59 Link Following	CVE-2009-5081	2024-11-21 10:11	2011-07-1	Show	GitHub Exploit DB Packet Storm

312259	-	gnu	groff	The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain f…	CWE-59 Link Following	CVE-2009-5080	2024-11-21 10:11	2011-07-1	Show	GitHub Exploit DB Packet Storm

312260	-	gnu	groff	The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack …	CWE-59 Link Following	CVE-2009-5079	2024-11-21 10:11	2011-07-1	Show	GitHub Exploit DB Packet Storm