Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227151	2.1	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の install_special_mapping 関数における mmap_min_addr 制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4346	2012-12-25 18:32	2010-12-22	Show	GitHub Exploit DB Packet Storm

227152	4.7	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の drivers/scsi/bfa/bfa_core.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4343	2012-12-25 18:31	2010-12-29	Show	GitHub Exploit DB Packet Storm

227153	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の igb_receive_skb 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4263	2012-12-25 18:30	2011-01-18	Show	GitHub Exploit DB Packet Storm

227154	6.1	警告	サイバートラスト株式会社 VMware シトリックス・システムズレッドハット	-	Xen の fixup_page_fault 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-4255	2012-12-25 18:28	2011-01-13	Show	GitHub Exploit DB Packet Storm

227155	6.1	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel のソケット実装におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4251	2012-12-25 18:27	2011-03-1	Show	GitHub Exploit DB Packet Storm

227156	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の wait_for_unix_gc 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4249	2012-12-25 18:26	2010-11-29	Show	GitHub Exploit DB Packet Storm

227157	4.7	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の _exit_signal 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-4248	2012-12-25 18:24	2010-11-30	Show	GitHub Exploit DB Packet Storm

227158	5.5	警告	サイバートラスト株式会社 VMware シトリックス・システムズレッドハット	-	Xen の do_block_io_op 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4247	2012-12-25 18:22	2011-01-4	Show	GitHub Exploit DB Packet Storm

227159	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の s/exec.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4243	2012-12-25 18:21	2011-01-22	Show	GitHub Exploit DB Packet Storm

227160	4	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の hci_uart_tty_open 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4242	2012-12-25 18:03	2010-11-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311461	6.5	MEDIUM Adjacent	gotenna	gotenna	In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh network…	NVD-CWE-Other	CVE-2024-41722	2024-10-18 02:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

311462	4.3	MEDIUM Adjacent	gotenna	atak_plugin	The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the …	CWE-203 Information Exposure Through Discrepancy	CVE-2024-41715	2024-10-18 02:15	2024-09-27	Show	GitHub Exploit DB Packet Storm

311463	9.1	CRITICAL Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves insecure communication between the FRP (Fast Reverse Proxy) client and server when Gradio's `sh…	CWE-311 Missing Encryption of Sensitive Data	CVE-2024-47871	2024-10-18 02:11	2024-10-11	Show	GitHub Exploit DB Packet Storm

311464	7.5	HIGH Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This is a data validation vulnerability affecting several Gradio components, which allows arbitrary file leaks through the …	CWE-22 Path Traversal	CVE-2024-47868	2024-10-18 02:04	2024-10-11	Show	GitHub Exploit DB Packet Storm

311465	4.3	MEDIUM Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enable_monitoring flag not properly disabling monitoring when set to False…	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2024-47168	2024-10-18 02:00	2024-10-11	Show	GitHub Exploit DB Packet Storm

311466	3.7	LOW Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a timing attack in the way Gradio compares hashes for the `analytics_dashboard` function. Since…	CWE-203 Information Exposure Through Discrepancy	CVE-2024-47869	2024-10-18 01:59	2024-10-11	Show	GitHub Exploit DB Packet Storm

311467	8.1	HIGH Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a race condition in the `update_root_in_config` function, allowing an attacker to modify the `r…	CWE-362 Race Condition	CVE-2024-47870	2024-10-18 01:57	2024-10-11	Show	GitHub Exploit DB Packet Storm

311468	5.4	MEDIUM Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves Cross-Site Scripting (XSS) on any Gradio server that allows file uploads. Authenticated users c…	CWE-79 Cross-site Scripting	CVE-2024-47872	2024-10-18 01:54	2024-10-11	Show	GitHub Exploit DB Packet Storm

311469	9.8	CRITICAL Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery (SSRF) in the `/queue/join` endpoint. Gradio’s `async_save_url_to…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47167	2024-10-18 01:53	2024-10-11	Show	GitHub Exploit DB Packet Storm

311470	5.3	MEDIUM Network	gradio_project	gradio	Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the `/custom_component` endpoint. Attackers can exploit this…	CWE-22 Path Traversal	CVE-2024-47166	2024-10-18 01:48	2024-10-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed