Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230681	6.9	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の elf/dl-object.c における権限を取得される脆弱性	CWE-Other その他	CVE-2011-0536	2012-12-18 17:07	2011-04-4	Show	GitHub Exploit DB Packet Storm

230682	7.2	危険	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の encode_name マクロにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0296	2012-12-18 17:04	2010-06-1	Show	GitHub Exploit DB Packet Storm

230683	5	警告	サイバートラスト株式会社 VMware MIT Kerberos レッドハットオラクル	-	MIT Kerberos 5 の Key Distribution Center におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0282	2012-12-18 16:57	2011-02-8	Show	GitHub Exploit DB Packet Storm

230684	5	警告	サイバートラスト株式会社 VMware MIT Kerberos レッドハットオラクル	-	MIT Kerberos 5 の unparse 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2011-0281	2012-12-18 16:54	2011-02-8	Show	GitHub Exploit DB Packet Storm

230685	3.7	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4450	2012-12-18 16:39	2011-02-15	Show	GitHub Exploit DB Packet Storm

230686	2.6	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4448	2012-12-18 16:36	2011-02-15	Show	GitHub Exploit DB Packet Storm

230687	4.3	警告	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4447	2012-12-18 16:34	2011-02-15	Show	GitHub Exploit DB Packet Storm

230688	10	危険	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4469	2012-12-18 16:32	2011-02-15	Show	GitHub Exploit DB Packet Storm

230689	4	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4468	2012-12-18 16:30	2011-02-15	Show	GitHub Exploit DB Packet Storm

230690	5	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4466	2012-12-18 16:24	2011-02-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
261	-		-	-	CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it trusts the transport w… New	CWE-303 Incorrect Implementation of Authentication Algorithm	CVE-2026-33190	2026-05-8 00:06	2026-05-6	Show	GitHub Exploit DB Packet Storm

262	-		-	-	CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-QUIC (DoQ) server can be driven into unbounded goroutine and memory growth by a remote client that opens many QU… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-32934	2026-05-8 00:06	2026-05-6	Show	GitHub Exploit DB Packet Storm

263	-		-	-	CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server check… New	CWE-287 Improper Authentication	CVE-2026-35579	2026-05-8 00:06	2026-05-6	Show	GitHub Exploit DB Packet Storm

264	-		-	-	Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at ~/.local/share/jupyter/runt… New	CWE-613 Insufficient Session Expiration	CVE-2026-40934	2026-05-8 00:06	2026-05-6	Show	GitHub Exploit DB Packet Storm

265	7.5	HIGH Network	-	-	GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP due to a nil poin… New	CWE-476 NULL Pointer Dereference	CVE-2026-41642	2026-05-8 00:06	2026-05-7	Show	GitHub Exploit DB Packet Storm

266	7.5	HIGH Network	-	-	GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending… New	CWE-476 NULL Pointer Dereference	CVE-2026-42285	2026-05-8 00:06	2026-05-7	Show	GitHub Exploit DB Packet Storm

267	8.1	HIGH Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionalit… Update	CWE-620 Unverified Password Change	CVE-2026-42084	2026-05-8 00:05	2026-05-5	Show	GitHub Exploit DB Packet Storm

268	4.3	MEDIUM Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in… Update	CWE-23 Relative Path Traversal	CVE-2026-42085	2026-05-8 00:05	2026-05-5	Show	GitHub Exploit DB Packet Storm

269	4.6	MEDIUM Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0, the Command Sender UI uses an unsafe eval() function on… Update	CWE-79 Cross-site Scripting	CVE-2026-42086	2026-05-8 00:05	2026-05-5	Show	GitHub Exploit DB Packet Storm

270	9.6	CRITICAL Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability e… Update	CWE-89 SQL Injection	CVE-2026-42087	2026-05-8 00:05	2026-05-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed