Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259601	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK における権限を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3881	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259602	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Abstract Window Toolkit (AWT) における情報漏えいの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3880	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259603	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の X11 および Win32GraphicsDevice サブシステムにおける getConfigurations 関数による配列の複製に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3879	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259604	5	警告	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の TrueType フォント解析機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3729	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259605	5	警告	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の Java Runtime Environment (JRE) におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3728	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259606	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0248	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

259607	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0244	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

259608	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0027	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

259609	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0247	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

259610	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0246	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3601	6.5	MEDIUM Network	springaicommunity	mcp_security	mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45609	2026-06-3 23:08	2026-05-30	Show	GitHub Exploit DB Packet Storm

3602	3.3	LOW Local	google	android	In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed.…	CWE-120 Classic Buffer Overflow	CVE-2026-0056	2026-06-3 22:47	2026-06-2	Show	GitHub Exploit DB Packet Storm

3603	7.8	HIGH Local	google	android	In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privi…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2026-28577	2026-06-3 22:47	2026-06-2	Show	GitHub Exploit DB Packet Storm

3604	5.5	MEDIUM Local	google	android	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code. This could lead to local denial of service with n…	NVD-CWE-noinfo	CVE-2026-0067	2026-06-3 22:46	2026-06-2	Show	GitHub Exploit DB Packet Storm

3605	8.0	HIGH Adjacent	google	android	In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additi…	CWE-122 Heap-based Buffer Overflow	CVE-2026-0059	2026-06-3 22:46	2026-06-2	Show	GitHub Exploit DB Packet Storm

3606	5.5	MEDIUM Local	google	android	In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This could lead to local denial of service with no add…	NVD-CWE-noinfo	CVE-2026-0060	2026-06-3 22:46	2026-06-2	Show	GitHub Exploit DB Packet Storm

3607	7.8	HIGH Local	google	android	In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege w…	CWE-451 User Interface (UI) Misrepresentation of Critical Information	CVE-2026-0096	2026-06-3 22:41	2026-06-2	Show	GitHub Exploit DB Packet Storm

3608	8.0	HIGH Adjacent	google	android	In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation of privilege with no…	CWE-693 Protection Mechanism Failure	CVE-2026-0097	2026-06-3 22:41	2026-06-2	Show	GitHub Exploit DB Packet Storm

3609	7.8	HIGH Local	google	android	In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional ex…	CWE-441 Confused Deputy	CVE-2026-0098	2026-06-3 22:40	2026-06-2	Show	GitHub Exploit DB Packet Storm

3610	7.8	HIGH Local	google	android	In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege wit…	CWE-273 Improper Check for Dropped Privileges	CVE-2026-0099	2026-06-3 22:40	2026-06-2	Show	GitHub Exploit DB Packet Storm