Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251111 2.6 注意 アップル
アドビシステムズ
レッドハット
オラクル		 - Flash Player におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3636 2011-02-1 16:20 2010-11-9 Show GitHub Exploit DB Packet Storm
251112 8.5 危険 アップル
サイバートラスト株式会社
MySQL AB
レッドハット		 - MySQL の dispatch_command 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2009-2446 2011-02-1 16:19 2009-07-7 Show GitHub Exploit DB Packet Storm
251113 9.3 危険 サン・マイクロシステムズ
OpenOffice.org Project
レッドハット		 - Windows 上で稼働する OpenOffice.org の Impress モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2936 2011-02-1 16:13 2010-08-25 Show GitHub Exploit DB Packet Storm
251114 9.3 危険 サン・マイクロシステムズ
OpenOffice.org Project
レッドハット		 - Windows 上で稼働する OpenOffice.org の Impress モジュールにおける任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2010-2935 2011-02-1 16:11 2010-08-25 Show GitHub Exploit DB Packet Storm
251115 1.9 注意 Linux
レッドハット		 - Linux kernel における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4525 2011-02-1 14:08 2011-01-11 Show GitHub Exploit DB Packet Storm
251116 1.9 注意 Linux
レッドハット		 - Linux kernel の ntty_ioctl_tiocgicount 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4077 2011-02-1 13:33 2010-11-29 Show GitHub Exploit DB Packet Storm
251117 4 警告 Linux
レッドハット		 - Linux kernel の bcm_connect 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3874 2011-01-31 15:49 2010-12-8 Show GitHub Exploit DB Packet Storm
251118 1.9 注意 Linux
レッドハット		 - Linux kernel の viafb_ioctl_get_viafb_info 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4082 2011-01-31 15:40 2010-11-30 Show GitHub Exploit DB Packet Storm
251119 1.9 注意 Linux
レッドハット		 - Linux kernel の ivtvfb_ioctl 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4079 2011-01-31 15:03 2010-11-29 Show GitHub Exploit DB Packet Storm
251120 1.9 注意 Linux
レッドハット		 - Linux kernel の USB サブシステムにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4074 2011-01-31 15:01 2010-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
811 5.1 MEDIUM
Local 		- - uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes. New CWE-197
 Numeric Truncation Error 		CVE-2026-42371 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
812 - - - OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information … New CWE-346
 Origin Validation Error 		CVE-2026-22077 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
813 - - - An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management inter… New CWE-130
 Improper Handling of Length Parameter Inconsistency 		CVE-2026-3868 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
814 8.8 HIGH
Network 		- - A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgpon_l… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7096 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
815 8.8 HIGH
Network 		- - A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. This manipulation of th… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7097 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
816 9.8 CRITICAL
Network 		- - Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the class at all, bypassing the classname allowlist and allowin… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-41635 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
817 9.8 CRITICAL
Network 		- - The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-41409 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
818 8.8 HIGH
Network 		- - A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCountrystr. The manipulation of the argument countrystr results in os command injec… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7119 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
819 - - - Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS application New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-15626 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
820 - - - Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion. Plug.Cowboy.Conn.conn/1 in li… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-32688 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm