Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225341	7.2	危険	VMware Linux	-	Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2517	2012-12-21 16:44	2012-05-24	Show	GitHub Exploit DB Packet Storm

225342	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

225343	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

225344	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

225345	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4422	2012-12-21 16:38	2011-02-15	Show	GitHub Exploit DB Packet Storm

225346	5.1	警告	サン・マイクロシステムズヒューレット・パッカードオラクル VMware 日立レッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3574	2012-12-21 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

225347	5.1	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3573	2012-12-21 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

225348	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3572	2012-12-21 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

225349	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3571	2012-12-21 16:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

225350	7.6	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3570	2012-12-21 16:30	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
811	2.9	LOW Local	-	-	In uriparser before 1.0.2, there is pointer difference truncation to int in various places.	CWE-197 Numeric Truncation Error	CVE-2026-44927	2026-05-9 01:02	2026-05-8	Show	GitHub Exploit DB Packet Storm

812	2.9	LOW Local	-	-	In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2026-44928	2026-05-9 01:02	2026-05-8	Show	GitHub Exploit DB Packet Storm

813	-		-	-	Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Se…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-41423	2026-05-9 01:02	2026-05-8	Show	GitHub Exploit DB Packet Storm

814	-		-	-	YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allow unsanitized HTTP …	CWE-22 Path Traversal	CVE-2026-41493	2026-05-9 01:02	2026-05-8	Show	GitHub Exploit DB Packet Storm

815	4.7	MEDIUM Network	-	-	go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smar…	CWE-522 Insufficiently Protected Credentials	CVE-2026-41506	2026-05-9 01:02	2026-05-8	Show	GitHub Exploit DB Packet Storm

816	9.8	CRITICAL Network	-	-	math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Function() body without sanitization. Th…	CWE-94 Code Injection	CVE-2026-41507	2026-05-9 01:02	2026-05-8	Show	GitHub Exploit DB Packet Storm

817	-		-	-	Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contains an authenticated remote code execution vulnerabilit…	CWE-74 Injection	CVE-2025-67486	2026-05-9 01:02	2026-05-9	Show	GitHub Exploit DB Packet Storm

818	-		-	-	Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.49.1, Nhost automatically links an incoming OAuth identity to an existing Nhost account when the email addresses match. T…	CWE-287 Improper Authentication	CVE-2026-41574	2026-05-9 01:02	2026-05-9	Show	GitHub Exploit DB Packet Storm

819	7.5	HIGH Network	coredns.io	coredns	CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it trusts the transport w…	CWE-303 Incorrect Implementation of Authentication Algorithm	CVE-2026-33190	2026-05-9 01:01	2026-05-6	Show	GitHub Exploit DB Packet Storm

820	7.5	HIGH Network	coredns.io	coredns	CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone are configured. The l…	CWE-863 Incorrect Authorization	CVE-2026-33489	2026-05-9 01:00	2026-05-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed