Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255291 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3981 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
255292 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3980 2010-01-28 12:15 2009-12-15 Show GitHub Exploit DB Packet Storm
255293 10 危険 アドビシステムズ - Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3792 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
255294 5 警告 アドビシステムズ - Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3791 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
255295 5.8 警告 PostgreSQL.org
ターボリナックス
サン・マイクロシステムズ		 - PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-4034 2010-01-26 11:48 2009-12-15 Show GitHub Exploit DB Packet Storm
255296 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4031 2010-01-26 11:47 2009-11-29 Show GitHub Exploit DB Packet Storm
255297 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3613 2010-01-26 11:38 2009-10-19 Show GitHub Exploit DB Packet Storm
255298 4.6 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の NFSv4 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3286 2010-01-26 11:38 2009-09-22 Show GitHub Exploit DB Packet Storm
255299 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-2908 2010-01-26 11:38 2009-10-13 Show GitHub Exploit DB Packet Storm
255300 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel における権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2009-2695 2010-01-26 11:38 2009-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3551 7.8 HIGH
Local 		dell alienware_command_center Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC. A low privileged attacker with local access could potenti… CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-25908 2026-04-29 05:12 2026-04-28 Show GitHub Exploit DB Packet Storm
3552 - - - An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution when the published page is rendered. This… CWE-79
Cross-site Scripting 		CVE-2026-5362 2026-04-29 05:11 2026-04-28 Show GitHub Exploit DB Packet Storm
3553 7.1 HIGH
Adjacent 		- - A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-28747 2026-04-29 05:11 2026-04-28 Show GitHub Exploit DB Packet Storm
3554 5.0 MEDIUM
Adjacent 		- - When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring Boot 4.0.0–4.0.5 (fix … CWE-295
Improper Certificate Validation  		CVE-2026-40971 2026-04-29 05:11 2026-04-28 Show GitHub Exploit DB Packet Storm
3555 7.2 HIGH
Network 		- - Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillm… CWE-94
Code Injection 		CVE-2026-7191 2026-04-29 05:11 2026-04-28 Show GitHub Exploit DB Packet Storm
3556 9.4 CRITICAL
Network 		- - The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needi… CWE-306
Missing Authentication for Critical Function 		CVE-2026-3893 2026-04-29 05:10 2026-04-29 Show GitHub Exploit DB Packet Storm
3557 - - - A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request. CWE-694
 Use of Multiple Resources with Duplicate Identifier 		CVE-2026-5794 2026-04-29 05:10 2026-04-29 Show GitHub Exploit DB Packet Storm
3558 5.5 MEDIUM
Local 		- - A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may result in unintended exposure of sensitive information. The flaw stems from in… CWE-611
XXE 		CVE-2026-6807 2026-04-29 05:10 2026-04-29 Show GitHub Exploit DB Packet Storm
3559 6.5 MEDIUM
Network 		apache storm Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS transport is enabled in Apache … CWE-287
Improper Authentication 		CVE-2026-41081 2026-04-29 04:46 2026-04-27 Show GitHub Exploit DB Packet Storm
3560 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume tha… CWE-125
CWE-416
CWE-787
Out-of-bounds Read
 Use After Free
 Out-of-bounds Write 		CVE-2026-6785 2026-04-29 04:45 2026-04-27 Show GitHub Exploit DB Packet Storm