Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252071 6.6 警告 サイバートラスト株式会社
レッドハット		 - QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2784 2010-09-7 15:51 2010-08-19 Show GitHub Exploit DB Packet Storm
252072 6.6 警告 サイバートラスト株式会社
レッドハット		 - QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0431 2010-09-7 15:50 2010-08-19 Show GitHub Exploit DB Packet Storm
252073 6.6 警告 サイバートラスト株式会社
レッドハット		 - 複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0429 2010-09-7 15:49 2010-08-19 Show GitHub Exploit DB Packet Storm
252074 6.6 警告 サイバートラスト株式会社
レッドハット		 - 複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0428 2010-09-7 15:48 2010-08-19 Show GitHub Exploit DB Packet Storm
252075 - - ワイズテクノロジー - Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性 - - 2010-09-7 15:47 2010-08-17 Show GitHub Exploit DB Packet Storm
252076 7.8 危険 日立 - Hitachi Storage Command Suite 製品の組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		- 2010-09-7 15:45 2010-08-16 Show GitHub Exploit DB Packet Storm
252077 7.8 危険 日立 - JP1/Desktop Navigation 組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		- 2010-09-7 15:44 2010-08-16 Show GitHub Exploit DB Packet Storm
252078 4.3 警告 Zabbix - Zabbix の formatQuery 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2790 2010-09-7 15:42 2010-06-9 Show GitHub Exploit DB Packet Storm
252079 7.1 危険 レッドハット
X.Org Foundation
サイバートラスト株式会社
オラクル		 - X.Org の X server の fbComposite 関数における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2010-1166 2010-09-6 18:42 2010-04-28 Show GitHub Exploit DB Packet Storm
252080 10 危険 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の UDVM 解析部における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2010-2995 2010-09-6 17:48 2010-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the controller with devm_spi_register_controller(),… Update CWE-415
 Double Free 		CVE-2026-31489 2026-04-28 21:57 2026-04-22 Show GitHub Exploit DB Packet Storm
182 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migration_restore_produce(), the da… Update CWE-416
 Use After Free 		CVE-2026-31490 2026-04-28 21:52 2026-04-22 Show GitHub Exploit DB Packet Storm
183 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cau… Update CWE-190
 Integer Overflow or Wraparound 		CVE-2026-31491 2026-04-28 21:51 2026-04-22 Show GitHub Exploit DB Packet Storm
184 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before using it In irdma_create_qp, if ib_copy_to_udata fails, it will call irdma_destr… Update CWE-908
 Use of Uninitialized Resource 		CVE-2026-31492 2026-04-28 21:46 2026-04-22 Show GitHub Exploit DB Packet Storm
185 6.3 MEDIUM
Network 		- - A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category of the file /admin/ajax.php?action=save_category. Such manipulation of the argum… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7268 2026-04-28 21:16 2026-04-28 Show GitHub Exploit DB Packet Storm
186 6.3 MEDIUM
Network 		- - A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /view_prod.php. This manipulation of the argument ID causes sql injection. The attac… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7267 2026-04-28 21:16 2026-04-28 Show GitHub Exploit DB Packet Storm
187 6.3 MEDIUM
Network 		- - A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_order of the file /admin/ajax.php?action=save_order. The manipulation of the arg… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7266 2026-04-28 21:16 2026-04-28 Show GitHub Exploit DB Packet Storm
188 9.6 CRITICAL
Network 		microsoft partner_center Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. Update CWE-284
Improper Access Control 		CVE-2026-24303 2026-04-28 21:11 2026-04-24 Show GitHub Exploit DB Packet Storm
189 10.0 CRITICAL
Network 		microsoft entra_id Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network. Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-35431 2026-04-28 21:10 2026-04-24 Show GitHub Exploit DB Packet Storm
190 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread creation fails Boot-time trigger registration can fail before the trigger-data c… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-31481 2026-04-28 20:38 2026-04-22 Show GitHub Exploit DB Packet Storm