Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217991	4.3	警告	Plone Foundation	-	Plone のバッチ ID 変更スクリプトにおけるコンテンツアイテムのタイトルを変更される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5500	2014-11-6 11:05	2012-11-6	Show	GitHub Exploit DB Packet Storm

217992	6.5	警告	PostgreSQL.org アップル富士通	-	PostgreSQL におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0065	2014-11-5 18:15	2014-02-20	Show	GitHub Exploit DB Packet Storm

217993	4.3	警告	アップル	-	Apple OS X Server の CoreCollaboration の Xcode Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4406	2014-11-5 18:14	2014-09-17	Show	GitHub Exploit DB Packet Storm

217994	4	警告	PostgreSQL.org アップル富士通	-	PostgreSQL の chkpass 拡張機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-0066	2014-11-5 18:08	2014-02-20	Show	GitHub Exploit DB Packet Storm

217995	6.5	警告	PostgreSQL.org アップル富士通	-	PostgreSQL におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0063	2014-11-5 18:04	2014-02-20	Show	GitHub Exploit DB Packet Storm

217996	4.9	警告	PostgreSQL.org アップル富士通	-	PostgreSQL における不正なインデックスを作成される脆弱性	CWE-362 競合状態	CVE-2014-0062	2014-11-5 18:03	2014-02-20	Show	GitHub Exploit DB Packet Storm

217997	2.6	注意	ISC, Inc. アップル	-	ISC BIND の named の query.c 内の query_findclosestnsec3 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-0591	2014-11-5 17:54	2014-01-13	Show	GitHub Exploit DB Packet Storm

217998	7.8	危険	ISC, Inc. アップル	-	ISC BIND および DNSco BIND の rdata.c の RFC 5011 の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-4854	2014-11-5 17:48	2013-07-26	Show	GitHub Exploit DB Packet Storm

217999	7.8	危険	ISC, Inc. アップル	-	ISC BIND の resolver.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-3919	2014-11-5 17:47	2013-06-4	Show	GitHub Exploit DB Packet Storm

218000	5.4	警告	アップル	-	Apple OS X の Bluetooth におけるデバイスになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-4428	2014-11-5 17:37	2014-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
41	8.1	HIGH Network	mbs-solutions	universal_gateway_firmware	The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. Update	CWE-73 External Control of File Name or Path	CVE-2026-35076	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

42	8.1	HIGH Network	mbs-solutions	universal_gateway_firmware	The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. Update	CWE-73 External Control of File Name or Path	CVE-2026-35077	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

43	8.1	HIGH Network	mbs-solutions	universal_gateway_firmware	The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. Update	CWE-73 External Control of File Name or Path	CVE-2026-35078	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

44	8.1	HIGH Network	mbs-solutions	universal_gateway_firmware	The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. Update	CWE-73 External Control of File Name or Path	CVE-2026-35079	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

45	8.1	HIGH Network	mbs-solutions	universal_gateway_firmware	The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. Update	CWE-73 External Control of File Name or Path	CVE-2026-35080	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

46	8.1	HIGH Network	mbs-solutions	universal_gateway_firmware	The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input. Update	CWE-20 Improper Input Validation	CVE-2026-35081	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

47	8.8	HIGH Network	mbs-solutions	universal_gateway_firmware	The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input. Update	CWE-22 Path Traversal	CVE-2026-35082	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

48	8.8	HIGH Network	mbs-solutions	universal_gateway_firmware	A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root. Update	CWE-121 Stack-based Buffer Overflow	CVE-2026-35083	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

49	8.8	HIGH Network	mbs-solutions	universal_gateway_firmware	A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root. Update	CWE-121 Stack-based Buffer Overflow	CVE-2026-35084	2026-06-9 02:17	2026-06-3	Show	GitHub Exploit DB Packet Storm

50	9.3	CRITICAL Network	-	-	A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish … New	CWE-287 Improper Authentication	CVE-2026-50751	2026-06-9 02:16	2026-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed