Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255971	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における意図しないファイルをダウンロードさせられる脆弱性	CWE-16 環境設定	CVE-2009-3376	2010-04-1 13:46	2009-10-27	Show	GitHub Exploit DB Packet Storm

255972	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3380	2010-04-1 13:45	2009-10-27	Show	GitHub Exploit DB Packet Storm

255973	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3075	2010-04-1 13:44	2009-09-9	Show	GitHub Exploit DB Packet Storm

255974	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3072	2010-04-1 13:43	2009-09-9	Show	GitHub Exploit DB Packet Storm

255975	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox における任意の PKCS11 モジュールをインストール/削除させる脆弱性	CWE-Other その他	CVE-2009-3076	2010-04-1 13:42	2009-09-9	Show	GitHub Exploit DB Packet Storm

255976	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3077	2010-04-1 13:41	2009-09-9	Show	GitHub Exploit DB Packet Storm

255977	5	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox におけるドメイン名の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2470	2010-04-1 13:40	2009-07-21	Show	GitHub Exploit DB Packet Storm

255978	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2466	2010-04-1 13:38	2009-07-21	Show	GitHub Exploit DB Packet Storm

255979	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2463	2010-04-1 13:36	2009-07-21	Show	GitHub Exploit DB Packet Storm

255980	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2462	2010-04-1 13:34	2009-07-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
931	5.1	MEDIUM Adjacent	-	-	HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information. Such behaviour may allo…	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2025-62305	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

932	5.1	MEDIUM Adjacent	-	-	HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details,…	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2025-62308	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

933	2.6	LOW Adjacent	-	-	HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to…	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2025-62309	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

934	5.4	MEDIUM Adjacent	-	-	HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2025-62310	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

935	4.3	MEDIUM Adjacent	-	-	HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized a…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2025-62311	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

936	3.0	LOW Adjacent	-	-	HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,…	CWE-522 Insufficiently Protected Credentials	CVE-2025-62312	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

937	5.4	MEDIUM Adjacent	-	-	HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized …	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2025-62313	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

938	2.3	LOW Adjacent	-	-	HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2025-62316	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

939	2.6	LOW Adjacent	-	-	HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst…	CWE-598 Information Exposure Through Query Strings in GET Request	CVE-2025-62317	2026-05-15 02:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

940	7.5	HIGH Network	libexpat_project	libexpat	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-45186	2026-05-15 02:20	2026-05-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed