Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252301	6.8	警告	BlackBerry	-	BlackBerry Device Software のブラウザにおける同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3934	2011-03-31 13:57	2010-10-14	Show	GitHub Exploit DB Packet Storm

252302	6	警告	アップルサイバートラスト株式会社 CUPS ターボリナックスオラクルレッドハット	-	Apple Mac OS X 上で稼働する CUPS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0540	2011-03-31 13:55	2010-06-15	Show	GitHub Exploit DB Packet Storm

252303	6.9	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS の cupsFileOpen 関数における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-2431	2011-03-31 13:54	2010-06-17	Show	GitHub Exploit DB Packet Storm

252304	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS のテキストフィルタサブシステムにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0542	2011-03-31 13:53	2010-06-17	Show	GitHub Exploit DB Packet Storm

252305	7.9	危険	アップルサイバートラスト株式会社レッドハットオラクル CUPS	-	CUPS の cupsd 内にある ipp.c における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2941	2011-03-31 13:51	2010-11-11	Show	GitHub Exploit DB Packet Storm

252306	4.3	警告	アップルサイバートラスト株式会社 CUPS ターボリナックスオラクルレッドハット	-	Apple Mac OS X 上で稼働する CUPS における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2010-1748	2011-03-31 13:45	2010-06-15	Show	GitHub Exploit DB Packet Storm

252307	6.9	警告	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における権限昇格の脆弱性	CWE-Other その他	CVE-2011-0575	2011-03-31 13:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

252308	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0130	2011-03-30 15:55	2011-03-3	Show	GitHub Exploit DB Packet Storm

252309	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0129	2011-03-30 15:53	2011-03-3	Show	GitHub Exploit DB Packet Storm

252310	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0128	2011-03-30 15:52	2011-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2461	7.8	HIGH Local	-	-	A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger …	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-33999	2026-04-29 23:16	2026-04-24	Show	GitHub Exploit DB Packet Storm

2462	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY filemap_fault() may drop the mmap_lock before returning VM_FAULT_R…	CWE-416 Use After Free	CVE-2026-31597	2026-04-29 23:15	2026-04-25	Show	GitHub Exploit DB Packet Storm

2463	5.3	MEDIUM Adjacent	opentelemetry	opentelemetry	OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may parse a server-provide…	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-40891	2026-04-29 23:15	2026-04-24	Show	GitHub Exploit DB Packet Storm

2464	5.4	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.3.31 fails to terminate active WebSocket sessions when rotating device tokens. Attackers with previously compromised credentials can maintain unauthorized access through existing…	CWE-613 Insufficient Session Expiration	CVE-2026-41356	2026-04-29 23:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

2465	7.1	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable …	CWE-184 CWE-918 Incomplete Blacklist Server-Side Request Forgery (SSRF)	CVE-2026-41361	2026-04-29 23:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

2466	3.3	LOW Local	openclaw	openclaw	OpenClaw before 2026.3.31 contains an environment variable leakage vulnerability in SSH-based sandbox backends that pass unsanitized process.env to child processes. Attackers can exploit this by leve…	CWE-214 Invocation of Process Using Visible Sensitive Information	CVE-2026-41357	2026-04-29 22:57	2026-04-24	Show	GitHub Exploit DB Packet Storm

2467	5.9	MEDIUM Network	opentelemetry	opentelemetry	OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry to a back-end/collector over gRPC or HTTP using OpenTelemetry Protocol format (OTLP), if t…	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-40182	2026-04-29 22:52	2026-04-24	Show	GitHub Exploit DB Packet Storm

2468	8.8	HIGH Network	openclaw	openclaw	OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence setti…	CWE-269 Improper Privilege Management	CVE-2026-41359	2026-04-29 22:44	2026-04-24	Show	GitHub Exploit DB Packet Storm

2469	6.5	MEDIUM Network	-	-	When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total leng…	CWE-130 Improper Handling of Length Parameter Inconsistency	CVE-2026-5265	2026-04-29 22:16	2026-04-24	Show	GitHub Exploit DB Packet Storm

2470	9.8	CRITICAL Network	apache	pony_mail	UNSUPPORTED WHEN ASSIGNED Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover. This issue affects all …	CWE-444 HTTP Request Smuggling	CVE-2026-41873	2026-04-29 22:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed