Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
871 9.8 緊急
Network 		日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49197 2026-06-9 14:13 2026-05-29 Show GitHub Exploit DB Packet Storm
872 4.9 警告
Network 		日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-49198 2026-06-9 14:13 2026-05-29 Show GitHub Exploit DB Packet Storm
873 9.1 緊急
Network 		Apache Software Foundation Apache Fory Apache Software FoundationのApache Foryにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-50076 2026-06-9 14:13 2026-06-4 Show GitHub Exploit DB Packet Storm
874 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-50214 2026-06-9 14:13 2026-06-4 Show GitHub Exploit DB Packet Storm
875 4.9 警告
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-50224 2026-06-9 14:13 2026-06-4 Show GitHub Exploit DB Packet Storm
876 9.1 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-50225 2026-06-9 14:12 2026-06-4 Show GitHub Exploit DB Packet Storm
877 5.3 警告
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2026-50226 2026-06-9 14:12 2026-06-4 Show GitHub Exploit DB Packet Storm
878 5.4 警告
Network 		Check MK Check MK Check MKにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7186 2026-06-9 14:12 2026-06-8 Show GitHub Exploit DB Packet Storm
879 4.8 警告
Network 		Check MK Check MK Check MKにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-8078 2026-06-9 14:12 2026-06-8 Show GitHub Exploit DB Packet Storm
880 4.8 警告
Network 		Check MK Check MK Check MKにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-9549 2026-06-9 14:12 2026-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354181 - apple iphone_os Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a MARQUEE element. CWE-20
 Improper Input Validation  		CVE-2010-1181 2012-03-30 13:00 2010-03-30 Show GitHub Exploit DB Packet Storm
354182 - emc networker EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly … NVD-CWE-Other
CVE-2002-0113 2012-03-30 10:14 2002-03-25 Show GitHub Exploit DB Packet Storm
354183 - emc networker EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: th… NVD-CWE-Other
CVE-2002-0114 2012-03-30 10:14 2002-03-25 Show GitHub Exploit DB Packet Storm
354184 - linux linux_kernel The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a de… CWE-399
 Resource Management Errors 		CVE-2007-6733 2012-03-19 13:00 2010-03-17 Show GitHub Exploit DB Packet Storm
354185 - cacti cacti SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a va… CWE-89
SQL Injection 		CVE-2010-2092 2012-02-16 13:04 2010-05-28 Show GitHub Exploit DB Packet Storm
354186 - cacti cacti SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter. CWE-89
SQL Injection 		CVE-2010-1431 2012-02-16 13:02 2010-05-5 Show GitHub Exploit DB Packet Storm
354187 - hp power_manager Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-3999 2012-02-14 12:49 2010-01-21 Show GitHub Exploit DB Packet Storm
354188 - cafuego simple_document_management_system Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the (1) folder_id parameter in list… CWE-89
SQL Injection 		CVE-2005-3877 2012-02-7 14:00 2005-11-29 Show GitHub Exploit DB Packet Storm
354189 - plume-cms plume_cms Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_config[manager_path] parameter to (1) articles.php, … CWE-94
Code Injection 		CVE-2006-4533 2011-11-10 14:00 2006-09-2 Show GitHub Exploit DB Packet Storm
354190 - ffmpeg ffmpeg oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted… CWE-189
Numeric Errors 		CVE-2009-4632 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm