Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3401	7.4	重要 Network	株式会社EPG	iOSアプリ「くら寿司公式アプリ」 Androidアプリ「くら寿司公式アプリ」	スマートフォンアプリ「くら寿司公式アプリ」における証明書検証不備の脆弱性	CWE-Other その他	CVE-2026-41872	2026-05-11 12:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

3402	3.3	低 Local	X.Org Foundation	libxpm	libXpmにおける境界外読み取りの脆弱性	CWE-Other その他	CVE-2026-4367	2026-05-11 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

3403	7.3	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2024-46507	2026-05-11 11:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

3404	7.5	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2024-46508	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

3405	9.8	緊急 Network	Frappe	ERPNext	FrappeのERPNextにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-38431	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3406	6.1	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-38432	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3407	9.1	緊急 Network	CHORNY	Apache::Session	CHORNYのApache::Sessionにおける有効期限後または解放後のリソースの操作に関する脆弱性	CWE-672 有効期限後または解放後のリソースの操作	CVE-2013-10075	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

3408	9.8	緊急 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおける複数の脆弱性	CWE-502 CWE-918	CVE-2026-34084	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3409	5.4	警告 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-35453	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

3410	9.1	緊急 Network	Zcash Foundation	Zebra-script Zebrad	Zcash FoundationのZebra-script等の複数製品における呼び出し元による仕様の不適切な準拠に関する脆弱性	CWE-573 呼び出し元による仕様の不適切な準拠	CVE-2026-41583	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
358041	-	matt_wright	download.cgi	Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.	NVD-CWE-Other	CVE-1999-1377	2008-09-6 05:19	1999-09-9	Show	GitHub Exploit DB Packet Storm

358042	-	sun	sunos	passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.	NVD-CWE-Other	CVE-1999-1388	2008-09-6 05:19	1994-05-13	Show	GitHub Exploit DB Packet Storm

358043	-	debian	debian_linux	suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.	NVD-CWE-Other	CVE-1999-1390	2008-09-6 05:19	1998-04-28	Show	GitHub Exploit DB Packet Storm

358044	-	next	next	Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions.	NVD-CWE-Other	CVE-1999-1391	2008-09-6 05:19	1990-10-3	Show	GitHub Exploit DB Packet Storm

358045	-	next	nex next	Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.	NVD-CWE-Other	CVE-1999-1392	2008-09-6 05:19	1990-10-3	Show	GitHub Exploit DB Packet Storm

358046	-	sun	sunos	Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash).	NVD-CWE-Other	CVE-1999-1396	2008-09-6 05:19	1992-07-21	Show	GitHub Exploit DB Packet Storm

358047	-	sgi	irix	Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).	NVD-CWE-Other	CVE-1999-1401	2008-09-6 05:19	1996-12-5	Show	GitHub Exploit DB Packet Storm

358048	-	digital	ultrix	Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.	NVD-CWE-Other	CVE-1999-1415	2008-09-6 05:19	1991-08-23	Show	GitHub Exploit DB Packet Storm

358049	-	mirabilis	icq_web_front	ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("4…	NVD-CWE-Other	CVE-1999-1418	2008-09-6 05:19	1999-05-1	Show	GitHub Exploit DB Packet Storm

358050	-	sun	solstice_adminsuite	Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table e…	NVD-CWE-Other	CVE-1999-1424	2008-09-6 05:19	1997-11-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed