Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258901	5	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox におけるドメイン名の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2470	2010-04-1 13:40	2009-07-21	Show	GitHub Exploit DB Packet Storm

258902	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2466	2010-04-1 13:38	2009-07-21	Show	GitHub Exploit DB Packet Storm

258903	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2463	2010-04-1 13:36	2009-07-21	Show	GitHub Exploit DB Packet Storm

258904	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2462	2010-04-1 13:34	2009-07-21	Show	GitHub Exploit DB Packet Storm

258905	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の fasync_helper 関数における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4141	2010-03-29 15:18	2010-01-19	Show	GitHub Exploit DB Packet Storm

258906	9.3	危険	アップル	-	Apple Safari における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0045	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

258907	4.3	警告	アップル	-	Apple Safari の PubSub における Cookie が設定される脆弱性	CWE-16 環境設定	CVE-2010-0044	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

258908	7.5	危険	サン・マイクロシステムズ GNU Project サイバートラスト株式会社レッドハット	-	GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4476	2010-03-25 11:47	2007-08-17	Show	GitHub Exploit DB Packet Storm

258909	7.8	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3282	2010-03-24 12:23	2009-10-1	Show	GitHub Exploit DB Packet Storm

258910	7.2	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3281	2010-03-24 12:22	2009-10-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4321	5.0	MEDIUM Local	-	-	GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-read…	CWE-116 Improper Encoding or Escaping of Output	CVE-2026-44972	2026-05-30 00:39	2026-05-28	Show	GitHub Exploit DB Packet Storm

4322	-		-	-	This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-32996	2026-05-30 00:39	2026-05-28	Show	GitHub Exploit DB Packet Storm

4323	-		-	-	A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.	CWE-36 Absolute Path Traversal	CVE-2026-32997	2026-05-30 00:39	2026-05-28	Show	GitHub Exploit DB Packet Storm

4324	-		-	-	This vulnerability in Veeam Service Provider Console allows for remote code execution.	CWE-233 Improper Handling of Parameters	CVE-2026-32998	2026-05-30 00:39	2026-05-28	Show	GitHub Exploit DB Packet Storm

4325	9.0	CRITICAL Network	-	-	Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the aff…	CWE-94 Code Injection	CVE-2026-32999	2026-05-30 00:39	2026-05-28	Show	GitHub Exploit DB Packet Storm

4326	-		-	-	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit heavily restricted. More precise…	CWE-502 Deserialization of Untrusted Data	CVE-2026-9828	2026-05-30 00:39	2026-05-28	Show	GitHub Exploit DB Packet Storm

4327	-		-	-	When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a single log line. The struct embe…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-6720	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

4328	6.5	MEDIUM Network	-	-	pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the fix for CVE-2026-33509 prevents setting storage_folder inside PKGDIR or userdir, but does NOT protect…	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2026-45306	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

4329	8.7	HIGH Network	-	-	pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the packages.js template at src/pyload/webui/app/themes/modern/templates/js/packages.js:172 interpolates …	CWE-79 Cross-site Scripting	CVE-2026-45348	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

4330	5.0	MEDIUM Network	-	-	pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the PREREQFUNCTION-based private IP check was not applied to HTTPRequest (used by the parse_urls API). An…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-46561	2026-05-30 00:39	2026-05-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed