Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4011	7.8	重要 Local	アドビシステムズ	Adobe Media Encoder	アドビのAdobe Media Encoderにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34639	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4012	7.8	重要 Local	アドビシステムズ	Adobe Media Encoder	アドビのAdobe Media Encoderにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-34640	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4013	7.8	重要 Local	アドビシステムズ	Adobe After Effects	アドビのAdobe After Effectsにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-34642	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4014	7.8	重要 Local	アドビシステムズ	Adobe After Effects	アドビのAdobe After Effectsにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34643	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4015	7.8	重要 Local	アドビシステムズ	Adobe After Effects	アドビのAdobe After Effectsにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-34644	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4016	9.6	緊急 Network	アドビシステムズ	Adobe Connect Desktop Application	アドビのAdobe Connect Desktop Applicationにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-34659	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4017	9.3	緊急 Network	アドビシステムズ	Adobe Connect Desktop Application	アドビのAdobe Connect Desktop Applicationにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-34660	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4018	6.3	警告 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-34664	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4019	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34681	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

4020	7.8	重要 Local	アドビシステムズ	Adobe Substance 3D Designer	アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-34682	2026-05-15 11:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312931	-	atcom	netvolution	Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable.	CWE-79 Cross-site Scripting	CVE-2009-5103	2024-11-21 10:11	2011-10-21	Show	GitHub Exploit DB Packet Storm

312932	-	atcom	netvolution	SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpe_nid parameter.	CWE-89 SQL Injection	CVE-2009-5102	2024-11-21 10:11	2011-10-21	Show	GitHub Exploit DB Packet Storm

312933	-	pentaho	bi_server	Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic.	CWE-200 Information Exposure	CVE-2009-5101	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312934	-	pentaho	bi_server	Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password.	CWE-200 Information Exposure	CVE-2009-5100	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312935	-	pentaho	bi_server	Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter.	CWE-79 Cross-site Scripting	CVE-2009-5099	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312936	-	hp	palm_pre_webos	The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long s…	CWE-399 Resource Management Errors	CVE-2009-5098	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312937	-	hp	palm_pre_webos	Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.	CWE-94 Code Injection	CVE-2009-5097	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312938	-	khalid_baheyeldin	flag_content	Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Reason parameter.	CWE-79 Cross-site Scripting	CVE-2009-5096	2024-11-21 10:11	2011-09-14	Show	GitHub Exploit DB Packet Storm

312939	-	ea-style	gbook	PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_ordner parameter.	CWE-94 Code Injection	CVE-2009-5095	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

312940	-	cmsfaethon	cms_faethon	SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter.	CWE-89 SQL Injection	CVE-2009-5094	2024-11-21 10:11	2011-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed