Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252051 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の OpenURLInDefaultBrowser メソッドにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2011-1426 2011-05-10 10:38 2011-04-12 Show GitHub Exploit DB Packet Storm
252052 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3450 2011-05-10 10:09 2011-01-28 Show GitHub Exploit DB Packet Storm
252053 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の Impress におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4253 2011-05-10 10:08 2011-01-28 Show GitHub Exploit DB Packet Storm
252054 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の WW8DopTypography::ReadFromMem 関数における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2010-3454 2011-05-10 10:07 2011-01-28 Show GitHub Exploit DB Packet Storm
252055 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の oowriter における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-3452 2011-05-10 10:06 2011-01-28 Show GitHub Exploit DB Packet Storm
252056 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の Impress におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4643 2011-05-10 10:05 2011-01-28 Show GitHub Exploit DB Packet Storm
252057 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の WW8ListManager::WW8ListManager 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-3453 2011-05-10 10:04 2011-01-28 Show GitHub Exploit DB Packet Storm
252058 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の oowriter における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-3451 2011-05-10 10:04 2011-01-28 Show GitHub Exploit DB Packet Storm
252059 6.9 警告 OpenOffice.org Project
レッドハット
- OpenOffice.org の soffice における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3689 2011-05-10 10:01 2011-01-28 Show GitHub Exploit DB Packet Storm
252060 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-1233 2011-05-9 12:34 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2591 9.8 CRITICAL
Network
senselive x3500_firmware A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rath… CWE-798
 Use of Hard-coded Credentials
CVE-2026-35503 2026-04-29 04:33 2026-04-24 Show GitHub Exploit DB Packet Storm
2592 5.3 MEDIUM
Network
senselive x3500_firmware A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2026-40431 2026-04-29 04:33 2026-04-24 Show GitHub Exploit DB Packet Storm
2593 9.8 CRITICAL
Network
senselive x3500_firmware A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config appli… CWE-306
Missing Authentication for Critical Function
CVE-2026-40620 2026-04-29 04:32 2026-04-24 Show GitHub Exploit DB Packet Storm
2594 9.1 CRITICAL
Network
senselive x3500_firmware A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or server-side validation. By apply… CWE-306
Missing Authentication for Critical Function
CVE-2026-27843 2026-04-29 04:32 2026-04-24 Show GitHub Exploit DB Packet Storm
2595 8.1 HIGH
Network
senselive x3500_firmware A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections. Because the application do… CWE-352
 Origin Validation Error
CVE-2026-27841 2026-04-29 04:32 2026-04-24 Show GitHub Exploit DB Packet Storm
2596 5.4 MEDIUM
Network
senselive x3500_firmware A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requi… CWE-613
 Insufficient Session Expiration
CVE-2026-25720 2026-04-29 04:31 2026-04-24 Show GitHub Exploit DB Packet Storm
2597 5.9 MEDIUM
Network
opentelemetry opentelemetry OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on … CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-41078 2026-04-29 04:24 2026-04-24 Show GitHub Exploit DB Packet Storm
2598 7.5 HIGH
Network
sqlalchemy mako Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is… CWE-22
Path Traversal
CVE-2026-41205 2026-04-29 04:14 2026-04-24 Show GitHub Exploit DB Packet Storm
2599 4.7 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_i… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-31535 2026-04-29 04:14 2026-04-25 Show GitHub Exploit DB Packet Storm
2600 9.8 CRITICAL
Network
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch processing we likely have reque… NVD-CWE-noinfo
CVE-2026-31536 2026-04-29 04:10 2026-04-25 Show GitHub Exploit DB Packet Storm