Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4421	9.1	緊急 Network	Apache Software Foundation	CloudStack	Apache Software FoundationのCloudStackにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-25199	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

4422	7.5	重要 Network	マイクロソフト	Microsoft 365 Copilot BizChat	M365 Copilot の情報漏えいの脆弱性	CWE-138 特殊要素の不適切な無害化	CVE-2026-26129	2026-05-11 11:12	2026-05-7	Show	GitHub Exploit DB Packet Storm

4423	7.5	重要 Network	マイクロソフト	Microsoft 365 Copilot BizChat	M365 Copilot の情報漏えいの脆弱性	CWE-74 インジェクション	CVE-2026-26164	2026-05-11 11:12	2026-05-7	Show	GitHub Exploit DB Packet Storm

4424	9.8	緊急 Network	vm2 project	vm2	vm2 projectのvm2における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-26956	2026-05-11 11:12	2026-05-4	Show	GitHub Exploit DB Packet Storm

4425	6.5	警告 Network	Traccar Ltd	Traccar	Traccar LtdのTraccarにおけるCSV ファイル内の数式要素の中和に関する脆弱性	CWE-1236 CSV ファイル内の数式要素の不適切な中和	CVE-2026-27644	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

4426	5.4	警告 Network	Traccar Ltd	Traccar	Traccar LtdのTraccarにおけるブラインド XPath インジェクションの脆弱性	CWE-91 ブラインド XPath インジェクション	CVE-2026-27693	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

4427	5.4	警告 Network	Traccar Ltd	Traccar	Traccar LtdのTraccarにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-27694	2026-05-11 11:11	2026-05-5	Show	GitHub Exploit DB Packet Storm

4428	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31753	2026-05-11 11:11	2026-05-1	Show	GitHub Exploit DB Packet Storm

4429	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31754	2026-05-11 11:11	2026-05-1	Show	GitHub Exploit DB Packet Storm

4430	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31755	2026-05-11 11:11	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347061	-	dicas	mpegable_player	Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .YUV file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4758	2017-09-19 10:30	2010-03-30	Show	GitHub Exploit DB Packet Storm

347062	-	joric	bmxplay	Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .BMX file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4759	2017-09-19 10:30	2010-03-30	Show	GitHub Exploit DB Packet Storm

347063	-	winn	asp_guestbook	Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/guest…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-4760	2017-09-19 10:30	2010-03-30	Show	GitHub Exploit DB Packet Storm

347064	-	mini-stream	rm_downloader	Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long string in a .smi file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4761	2017-09-19 10:30	2010-03-30	Show	GitHub Exploit DB Packet Storm

347065	-	adobe	acrobat_reader	Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbitrary code via a cra…	CWE-94 Code Injection	CVE-2009-4764	2017-09-19 10:30	2010-04-6	Show	GitHub Exploit DB Packet Storm

347066	-	ipswitch	ws_ftp	Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status code portion of an H…	CWE-134 Use of Externally-Controlled Format String	CVE-2009-4775	2017-09-19 10:30	2010-04-21	Show	GitHub Exploit DB Packet Storm

347067	-	karl_core	bandsite_cms	SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php.	CWE-89 SQL Injection	CVE-2009-4792	2017-09-19 10:30	2010-04-22	Show	GitHub Exploit DB Packet Storm

347068	-	karl_core	bandsite_cms	Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an e…	CWE-94 Code Injection	CVE-2009-4793	2017-09-19 10:30	2010-04-22	Show	GitHub Exploit DB Packet Storm

347069	-	karl_core	bandsite_cms	Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type'	CWE-94 Code Injection	CVE-2009-4793	2017-09-19 10:30	2010-04-22	Show	GitHub Exploit DB Packet Storm

347070	-	jobhut.spranger	jobhut	SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pk parameter.	CWE-89 SQL Injection	CVE-2009-4797	2017-09-19 10:30	2010-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed