Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242311 9.3 危険 Foxit Software Inc - Foxit JPEG2000/JBIG2 Decoder アドオンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0691 2012-06-26 16:10 2009-06-23 Show GitHub Exploit DB Packet Storm
242312 9.3 危険 Foxit Software Inc - Foxit Reader の Foxit JPEG2000/JBIG2 Decoder アドオンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-0690 2012-06-26 16:10 2009-06-23 Show GitHub Exploit DB Packet Storm
242313 5 警告 FlashTux - Chat (WeeChat) の Wee Enhanced Environment におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0661 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
242314 6.9 警告 ASUSTeK Computer Inc. - Asus SmartLogon における "セキュリティ機能" を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-0656 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
242315 6.8 警告 falt4 - Falt4 CMS RC4 の admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0648 2012-06-26 16:10 2009-02-19 Show GitHub Exploit DB Packet Storm
242316 7.5 危険 4site - 4Site CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0646 2012-06-26 16:10 2009-02-18 Show GitHub Exploit DB Packet Storm
242317 5.1 警告 dminnich - Simple PHP News の post.php における news.txt へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0643 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
242318 7.5 危険 dminnich - Simple PHP News の post.php における news.txt へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0610 2012-06-26 16:10 2009-02-17 Show GitHub Exploit DB Packet Storm
242319 4.3 警告 apmuthu - phpSkelSite の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0594 2012-06-26 16:10 2009-02-16 Show GitHub Exploit DB Packet Storm
242320 7.5 危険 cafeengine - Easy CafeEngine の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0574 2012-06-26 16:10 2009-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1471 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch emac_dispatch_skb_zc() allocates a new skb via n… NVD-CWE-noinfo
CVE-2026-43039 2026-05-9 03:48 2026-05-2 Show GitHub Exploit DB Packet Storm
1472 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the … NVD-CWE-noinfo
CVE-2026-43038 2026-05-9 03:47 2026-05-2 Show GitHub Exploit DB Packet Storm
1473 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix NULL pointer dereference in ep_queue When the gadget endpoint is disabled or not yet configured, the ep->… CWE-476
 NULL Pointer Dereference 		CVE-2026-31755 2026-05-9 03:45 2026-05-2 Show GitHub Exploit DB Packet Storm
1474 9.1 CRITICAL
Network 		zfnd zebra-script
zebrad 		ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed to validate a consensus rule that restricted t… CWE-573
 Improper Following of Specification by Caller 		CVE-2026-41583 2026-05-9 03:44 2026-05-9 Show GitHub Exploit DB Packet Storm
1475 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: use skb_header_pointer() for TCPv4 GSO frag_off check Syzbot reported a KMSAN uninit-value warning in gso_features_check() c… CWE-908
 Use of Uninitialized Resource 		CVE-2026-43036 2026-05-9 03:44 2026-05-2 Show GitHub Exploit DB Packet Storm
1476 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When building netlink messages… CWE-908
 Use of Uninitialized Resource 		CVE-2026-43035 2026-05-9 03:43 2026-05-2 Show GitHub Exploit DB Packet Storm
1477 9.1 CRITICAL
Network 		zfnd zebra-script
zebrad 		ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.4.0 and prior to zebra-script version 6.0.0, the fix for CVE-2026-41583 introduced a separate issue due to insufficient error… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-44497 2026-05-9 03:42 2026-05-9 Show GitHub Exploit DB Packet Storm
1478 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type bnxt_hwrm_func_backing_store_qcaps_v2() stores resp->type from the firmware respo… NVD-CWE-noinfo
CVE-2026-43034 2026-05-9 03:41 2026-05-2 Show GitHub Exploit DB Packet Storm
1479 7.5 HIGH
Network 		zfnd zebrad ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit (MAX_BLOCK_SIGOPS), al… CWE-682
 Incorrect Calculation 		CVE-2026-44498 2026-05-9 03:40 2026-05-9 Show GitHub Exploit DB Packet Storm
1480 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption When decrypting data that is not in-place (src … NVD-CWE-noinfo
CVE-2026-43033 2026-05-9 03:40 2026-05-2 Show GitHub Exploit DB Packet Storm