Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5441 7.2 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC6 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC6 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8259 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
5442 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC6 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC6 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8264 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
5443 7.2 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC6 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC6 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8265 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
5444 7.2 重要
Network 		D-Link Systems, Inc. D-Link DNS-320 ファームウェア D-Link CorporationのD-Link DNS-320 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8271 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
5445 7.2 重要
Network 		D-Link Systems, Inc. D-Link DNS-320 ファームウェア D-Link CorporationのD-Link DNS-320 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8272 2026-05-13 10:20 2026-05-11 Show GitHub Exploit DB Packet Storm
5446 7.2 重要
Network 		D-Link Systems, Inc. D-Link DNS-320 ファームウェア D-Link CorporationのD-Link DNS-320 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8273 2026-05-13 10:20 2026-05-11 Show GitHub Exploit DB Packet Storm
5447 9.8 緊急
Network 		エレコム株式会社 WAB-S300IW2-PD
WRC-X3000GST2-B
WRC-X1800GS-B
WRC-X6000QSA-G
WRC-X3000GS2-W
WAB-S733IW2-PD
WAB-S733IW-AC
WAB-S733IW-PD
WRC-XE5400GS-G
WRC-X3000GS2-B
WRC-X1800GSA-B
WRC… 		エレコム無線LAN関連製品における複数の脆弱性 CWE-352
CWE-78
CWE-Other
CVE-2026-20704
CVE-2026-22550
CVE-2026-24449
CVE-2026-24465 		2026-05-12 15:09 2026-02-3 Show GitHub Exploit DB Packet Storm
5448 8.8 重要
Adjacent 		エレコム株式会社 WRC-X3000GS2-B ファームウェア
WAB-I1750-PS
WAB-S1775 ファームウェア
WRC-X3000GST2-B
WAB-S733MI
WAB-S1167-PS
WRC-X3000GS2A-B ファームウェア
WAB-M1775-PS ファームウェア
WRC-X3000GS2-W&n… 		エレコム製無線LANルーターおよび無線アクセスポイントにおける複数の脆弱性 CWE-119
CWE-79
CWE-Other
CVE-2024-34577
CVE-2024-39300
CVE-2024-42412
CVE-2024-43689 		2026-05-12 15:01 2024-08-27 Show GitHub Exploit DB Packet Storm
5449 6.8 警告
Adjacent 		エレコム株式会社 WRC-2533GST2 ファームウェア
WRC-X3000GST2-B
WRC-X1800GS-B
WRC-X6000QSA-G
WRC-2533GS2V-B
WMC-X1800GST-B
WRC-G01-W
WRC-XE5400GS-G
WRC-X1800GSA-B
WRC-X1800GSH-B
WRC-X6000XST-… 		エレコム製無線LANルーターにおける複数の脆弱性 CWE-352
CWE-78
CWE-Other
CVE-2024-34021
CVE-2024-39607
CVE-2024-40883 		2026-05-12 14:51 2024-07-30 Show GitHub Exploit DB Packet Storm
5450 - - ollama ollama Ollamaにおける境界外の読み取りおよび書き込みの脆弱性 - - 2026-05-12 12:34 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348001 - accellion secure_file_transfer_appliance Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-4648 2017-08-17 10:31 2010-02-20 Show GitHub Exploit DB Packet Storm
348002 - geccbblite geccbblite Multiple cross-site scripting (XSS) vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to (1) rispondi.php and (2) scrivi.php,… CWE-79
Cross-site Scripting 		CVE-2009-4649 2017-08-17 10:31 2010-02-23 Show GitHub Exploit DB Packet Storm
348003 - novell edirectory The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie. CWE-310
Cryptographic Issues 		CVE-2009-4655 2017-08-17 10:31 2010-02-27 Show GitHub Exploit DB Packet Storm
348004 - novell groupwise Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via t… CWE-79
Cross-site Scripting 		CVE-2009-4662 2017-08-17 10:31 2010-03-4 Show GitHub Exploit DB Packet Storm
348005 - fwbuilder firewall_builder Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via a symlink attack on an unspecified temporary file that is created by the iptables script. CWE-59
Link Following 		CVE-2009-4664 2017-08-17 10:31 2010-03-4 Show GitHub Exploit DB Packet Storm
348006 - winn winn_guestbook Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. CWE-79
Cross-site Scripting 		CVE-2009-4678 2017-08-17 10:31 2010-03-9 Show GitHub Exploit DB Packet Storm
348007 - edgephp ezodiak Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign parameter. CWE-79
Cross-site Scripting 		CVE-2009-4684 2017-08-17 10:31 2010-03-11 Show GitHub Exploit DB Packet Storm
348008 - phpscriptsnow astrology Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web script or HTML via the day parameter. CWE-79
Cross-site Scripting 		CVE-2009-4685 2017-08-17 10:31 2010-03-11 Show GitHub Exploit DB Packet Storm
348009 - phplemon adquick Cross-site scripting (XSS) vulnerability in account.php in phplemon AdQuick 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the red_url parameter. CWE-79
Cross-site Scripting 		CVE-2009-4686 2017-08-17 10:31 2010-03-11 Show GitHub Exploit DB Packet Storm
348010 - yourfreeworld programs_rating_script Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) … CWE-79
Cross-site Scripting 		CVE-2009-4690 2017-08-17 10:31 2010-03-11 Show GitHub Exploit DB Packet Storm