Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
236511 8.5 危険 JBMC Software - JBMC Software DirectAdmin の CMD_DB における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1525 2012-09-25 17:27 2009-05-5 Show GitHub Exploit DB Packet Storm
236512 4.3 警告 Mort Bay Consulting - Mort Bay Jetty におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1524 2012-09-25 17:27 2009-04-10 Show GitHub Exploit DB Packet Storm
236513 5 警告 Mort Bay Consulting - Mort Bay Jetty の HTTP サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1523 2012-09-25 17:27 2009-04-28 Show GitHub Exploit DB Packet Storm
236514 7.1 危険 IBM - IBM TSM クライアントにおける中間者攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2009-1522 2012-09-25 17:27 2009-04-30 Show GitHub Exploit DB Packet Storm
236515 7.5 危険 IBM - IBM TSM クライアントなどの製品で使用される Java GUI における任意のファイルを読み取られる脆弱性 CWE-noinfo
情報不足 		CVE-2009-1521 2012-09-25 17:27 2009-05-1 Show GitHub Exploit DB Packet Storm
236516 10 危険 IBM - IBM TSM クライアントの Web GUI におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1520 2012-09-25 17:27 2009-05-1 Show GitHub Exploit DB Packet Storm
236517 5 警告 pecio-cms - Pecio CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1519 2012-09-25 17:27 2009-05-4 Show GitHub Exploit DB Packet Storm
236518 7.5 危険 IceWarp, Inc. - IceWarp の Merak Mail Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1516 2012-09-25 17:27 2009-05-4 Show GitHub Exploit DB Packet Storm
236519 6.8 警告 Konstanty Bialkowski - libmodplug の src/load_pat.cpp の PATinst 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1513 2012-09-25 17:27 2009-05-4 Show GitHub Exploit DB Packet Storm
236520 6.5 警告 keir davis - X-Forum における Config.php に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1512 2012-09-25 17:27 2009-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1951 4.3 MEDIUM
Network 		- - Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pag… CWE-352
 Origin Validation Error 		CVE-2018-25354 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
1952 8.4 HIGH
Local 		- - Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious … CWE-120
Classic Buffer Overflow 		CVE-2018-25355 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
1953 8.4 HIGH
Local 		- - SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute arbitrary code. Attackers can tri… CWE-120
Classic Buffer Overflow 		CVE-2018-25356 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
1954 8.7 HIGH
Network 		- - NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient server-side input sanitization in the Req… CWE-79
Cross-site Scripting 		CVE-2026-41147 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
1955 - - - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5 and earlier, as well as 11.0.0-alpha.1 through 11.14.0, are vulnerable to HTML … CWE-94
Code Injection 		CVE-2026-41149 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
1956 - - - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5 and prior, in addition to 11.0.0-alpha.1 through 11.12.0 are vulnerable to CSS … CWE-94
Code Injection 		CVE-2026-41148 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
1957 8.8 HIGH
Network 		- - A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manip… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-9294 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
1958 8.8 HIGH
Network 		- - A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. Performing a manipul… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-9295 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
1959 6.3 MEDIUM
Network 		- - A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM of the component POST Request Handler. Executing a manipulation of the argument… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-9296 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm
1960 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. The manipulation of th… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-9297 2026-05-27 04:37 2026-05-23 Show GitHub Exploit DB Packet Storm