Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3461	9.6	緊急 Network	アドビシステムズ	Adobe Connect Desktop Application	アドビのAdobe Connect Desktop Applicationにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-34659	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3462	9.3	緊急 Network	アドビシステムズ	Adobe Connect Desktop Application	アドビのAdobe Connect Desktop Applicationにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-34660	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3463	6.3	警告 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-34664	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3464	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34681	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3465	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34682	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3466	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34683	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3467	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34684	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3468	8.7	重要 Network	アドビシステムズ	Adobe Commerce Adobe Commerce B2B magento	アドビのAdobe Commerce等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-34686	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3469	7.8	重要 Local	アドビシステムズ	Adobe After Effects	アドビのAdobe After Effectsにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34690	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

3470	4.4	警告 Local	PNG Development Group Debian	Debian GNU/Linux libpng	Debian等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-34757	2026-05-15 11:02	2026-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312391	-	khalid_baheyeldin	flag_content	Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Reason parameter.	CWE-79 Cross-site Scripting	CVE-2009-5096	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312392	-	ea-style	gbook	PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_ordner parameter.	CWE-94 Code Injection	CVE-2009-5095	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312393	-	cmsfaethon	cms_faethon	SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter.	CWE-89 SQL Injection	CVE-2009-5094	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312394	-	php4scripte	gastebuch	Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter.	CWE-22 Path Traversal	CVE-2009-5093	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312395	-	microsoft	fast_esp	Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2009-5092	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312396	-	vlinks	vlinks	SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2009-5091	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312397	-	daman371	bloggeruniverse	SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possib…	CWE-89 SQL Injection	CVE-2009-5090	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312398	-	ideacart	ideacart	Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.	CWE-22 Path Traversal	CVE-2009-5089	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312399	-	ideacart	ideacart	SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter.	CWE-89 SQL Injection	CVE-2009-5088	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312400	-	geovision	digital_surveillance_system	Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET request.	CWE-22 Path Traversal	CVE-2009-5087	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed