Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252351 9.3 危険 Mozilla Foundation
オラクル		 - 複数の Mozilla 製品の nsCycleCollector::MarkRoots 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0183 2011-01-5 14:19 2010-06-22 Show GitHub Exploit DB Packet Storm
252352 7.5 危険 レッドハット - Red Hat Enterprise MRG の Management Console における任意のジョブを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4179 2011-01-4 16:28 2010-11-30 Show GitHub Exploit DB Packet Storm
252353 7.8 危険 シスコシステムズ - 複数の CIsco 製品上で稼働する remote-access IPSec VPN の実装における有効なグループ名を列挙される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4354 2011-01-4 16:18 2010-09-22 Show GitHub Exploit DB Packet Storm
252354 4 警告 Pidgin
オラクル		 - Pidgin の libpurple 内にある oscar プロトコルプラグインの clientautoresp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2528 2011-01-4 16:14 2010-07-30 Show GitHub Exploit DB Packet Storm
252355 7.2 危険 VMware - 複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4297 2010-12-27 15:40 2010-12-2 Show GitHub Exploit DB Packet Storm
252356 7.2 危険 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4296 2010-12-27 15:38 2010-12-2 Show GitHub Exploit DB Packet Storm
252357 6.9 警告 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-4295 2010-12-27 15:36 2010-12-2 Show GitHub Exploit DB Packet Storm
252358 9.3 危険 VMware - 複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4294 2010-12-27 15:33 2010-12-2 Show GitHub Exploit DB Packet Storm
252359 2.1 注意 アップル - Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0530 2010-12-27 15:07 2010-12-9 Show GitHub Exploit DB Packet Storm
252360 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1508 2010-12-27 15:06 2010-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2271 7.7 HIGH
Network 		kyverno kyverno Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the `forEach` mutation handler allows any user wit… CWE-617
 Reachable Assertion 		CVE-2026-41485 2026-04-28 02:54 2026-04-24 Show GitHub Exploit DB Packet Storm
2272 9.1 CRITICAL
Network 		kyverno kyverno Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy automatically attache… CWE-200
CWE-918
Information Exposure
Server-Side Request Forgery (SSRF)  		CVE-2026-41323 2026-04-28 02:53 2026-04-24 Show GitHub Exploit DB Packet Storm
2273 7.5 HIGH
Network 		patrickjuchli basic-ftp basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote FTP server. A mal… CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41324 2026-04-28 02:48 2026-04-24 Show GitHub Exploit DB Packet Storm
2274 7.7 HIGH
Network 		kyverno kyverno Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-2026-22039 fixed cross-namespace privilege escalation in Kyverno's `apiCall` context by validating t… CWE-863
 Incorrect Authorization 		CVE-2026-41068 2026-04-28 02:48 2026-04-24 Show GitHub Exploit DB Packet Storm
2275 6.1 MEDIUM
Network 		freerdp freerdp FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have an off-by-one in the path traversal filter in `channels/drive/client/drive_file.c`. The `contains_dotdot… CWE-193
 Off-by-one Error 		CVE-2026-40254 2026-04-28 02:44 2026-04-24 Show GitHub Exploit DB Packet Storm
2276 5.5 MEDIUM
Local 		angryip angry_ip_scanner Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the port selection field. Attackers ca… CWE-787
 Out-of-bounds Write 		CVE-2018-25262 2026-04-28 02:30 2026-04-23 Show GitHub Exploit DB Packet Storm
2277 7.8 HIGH
Local 		lizardsystems lanspy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attac… CWE-787
 Out-of-bounds Write 		CVE-2018-25265 2026-04-28 02:28 2026-04-23 Show GitHub Exploit DB Packet Storm
2278 5.5 MEDIUM
Local 		angryip angry_ip_scanner Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessively large string. Attackers can … CWE-787
 Out-of-bounds Write 		CVE-2018-25266 2026-04-28 02:28 2026-04-23 Show GitHub Exploit DB Packet Storm
2279 7.8 HIGH
Local 		lizardsystems lanspy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payloa… CWE-787
 Out-of-bounds Write 		CVE-2018-25268 2026-04-28 02:25 2026-04-23 Show GitHub Exploit DB Packet Storm
2280 9.8 CRITICAL
Network 		thinkphp thinkphp ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can c… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2018-25270 2026-04-28 02:20 2026-04-23 Show GitHub Exploit DB Packet Storm