Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245091	7.8	危険	シスコシステムズ	-	Cisco ASA 5580 シリーズにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4914	2012-06-26 16:19	2009-04-6	Show	GitHub Exploit DB Packet Storm

245092	6.8	警告	accscripts	-	Acc PHP eMail の index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4906	2012-06-26 16:19	2010-06-25	Show	GitHub Exploit DB Packet Storm

245093	6.8	警告	accscripts	-	Acc Statistics の index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4905	2012-06-26 16:19	2010-06-25	Show	GitHub Exploit DB Packet Storm

245094	5	警告	dootzky	-	oBlog の article.php におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4904	2012-06-26 16:19	2010-06-25	Show	GitHub Exploit DB Packet Storm

245095	4.3	警告	dootzky	-	oBlog の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4903	2012-06-26 16:19	2010-06-25	Show	GitHub Exploit DB Packet Storm

245096	9.3	危険	Artifex Software	-	Ghostscript の gs/psi/iscan.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4897	2012-06-26 16:19	2010-07-22	Show	GitHub Exploit DB Packet Storm

245097	7.5	危険	CS-Cart	-	CS-Cart Beta の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4891	2012-06-26 16:19	2010-06-11	Show	GitHub Exploit DB Packet Storm

245098	7.5	危険	PHP-Fusion basti2web	-	PHP-Fusion の book_panel モジュールの books.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4889	2012-06-26 16:19	2010-06-11	Show	GitHub Exploit DB Packet Storm

245099	5	警告	bernhard frohlich	-	phpCommunity 2 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4886	2012-06-26 16:19	2010-06-11	Show	GitHub Exploit DB Packet Storm

245100	4.3	警告	bernhard frohlich	-	phpCommunity 2 の templates/1/login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4885	2012-06-26 16:19	2010-06-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2511	7.8	HIGH Local	nvidia	nvtabular	NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampe…	CWE-502 Deserialization of Untrusted Data	CVE-2026-24237	2026-06-5 02:40	2026-06-3	Show	GitHub Exploit DB Packet Storm

2512	6.1	MEDIUM Physics	dell	thinos	Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerabilit…	CWE-284 Improper Access Control	CVE-2026-40713	2026-06-5 02:37	2026-06-3	Show	GitHub Exploit DB Packet Storm

2513	7.8	HIGH Local	dell	thinos	Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, le…	CWE-284 Improper Access Control	CVE-2026-40715	2026-06-5 02:29	2026-06-3	Show	GitHub Exploit DB Packet Storm

2514	7.5	HIGH Network	mozilla	firefox	Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2026-10701	2026-06-5 02:25	2026-06-3	Show	GitHub Exploit DB Packet Storm

2515	5.3	MEDIUM Network	-	-	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log …	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-41178	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

2516	7.1	HIGH Physics	-	-	GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active toke…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-36176	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

2517	6.8	MEDIUM Physics	-	-	An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted str…	CWE-20 CWE-288 Improper Input Validation Authentication Bypass Using an Alternate Path or Channel	CVE-2026-36175	2026-06-5 02:16	2026-06-5	Show	GitHub Exploit DB Packet Storm

2518	9.1	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.	CWE-290 Authentication Bypass by Spoofing	CVE-2026-8644	2026-06-5 01:58	2026-06-2	Show	GitHub Exploit DB Packet Storm

2519	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.	CWE-502 Deserialization of Untrusted Data	CVE-2026-9319	2026-06-5 01:57	2026-06-2	Show	GitHub Exploit DB Packet Storm

2520	9.0	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.	CWE-94 Code Injection	CVE-2026-9311	2026-06-5 01:53	2026-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed