Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252631	10	危険	ターボリナックス ProFTPD Project	-	ProFTPD の pr_netio_telnet_get 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4221	2010-12-22 15:20	2010-10-29	Show	GitHub Exploit DB Packet Storm

252632	7.1	危険	サイバートラスト株式会社 ProFTPD Project ターボリナックス	-	ProFTPD の mod_site_misc モジュールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3867	2010-12-22 15:19	2010-10-29	Show	GitHub Exploit DB Packet Storm

252633	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3174	2010-12-22 15:16	2010-10-19	Show	GitHub Exploit DB Packet Storm

252634	4.3	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の SafeJSObjectWrapper 実装における同一生成元ポリシーを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2763	2010-12-22 15:15	2010-09-7	Show	GitHub Exploit DB Packet Storm

252635	4.3	警告	ISC, Inc. レッドハット	-	ISC DHCP サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-3611	2010-12-22 14:25	2010-11-2	Show	GitHub Exploit DB Packet Storm

252636	5	警告	Wireshark	-	Wireshark の ZigBee ZCL 解析部の epan/dissectors/packet-zbee-zcl.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4301	2010-12-22 14:20	2010-11-18	Show	GitHub Exploit DB Packet Storm

252637	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングを誘導される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1210	2010-12-21 16:14	2010-07-20	Show	GitHub Exploit DB Packet Storm

252638	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の XMLDocument::load 関数におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0182	2010-12-21 16:11	2010-03-30	Show	GitHub Exploit DB Packet Storm

252639	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0179	2010-12-21 16:10	2010-03-30	Show	GitHub Exploit DB Packet Storm

252640	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0178	2010-12-21 16:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2221	9.8	CRITICAL Network	-	-	A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the arg…	CWE-77 CWE-78 Command Injection OS Command	CVE-2026-7140	2026-04-28 03:35	2026-04-28	Show	GitHub Exploit DB Packet Storm

2222	5.4	MEDIUM Network	-	-	A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of the component Invit…	CWE-285 CWE-639 Improper Authorization Authorization Bypass Through User-Controlled Key	CVE-2026-7145	2026-04-28 03:35	2026-04-28	Show	GitHub Exploit DB Packet Storm

2223	4.0	MEDIUM Local	gnupg	libgcrypt	Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.	CWE-787 Out-of-bounds Write	CVE-2026-41990	2026-04-28 03:33	2026-04-23	Show	GitHub Exploit DB Packet Storm

2224	6.7	MEDIUM Local	gnupg	libgcrypt	Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.	CWE-787 Out-of-bounds Write	CVE-2026-41989	2026-04-28 03:33	2026-04-23	Show	GitHub Exploit DB Packet Storm

2225	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: af_unix: read UNIX_DIAG_VFS data under unix_state_lock Exact UNIX diag lookups hold a reference to the socket, but not to u->path…	-	CVE-2026-31673	2026-04-28 03:32	2026-04-25	Show	GitHub Exploit DB Packet Storm

2226	7.1	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Reject rt match rules whose addrnr exceeds IP6T_RT_HOPS. rt_mt6() …	-	CVE-2026-31674	2026-04-28 03:32	2026-04-25	Show	GitHub Exploit DB Packet Storm

2227	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_netem: fix out-of-bounds access in packet corruption In netem_enqueue(), the packet corruption logic uses get_rand…	-	CVE-2026-31675	2026-04-28 03:32	2026-04-25	Show	GitHub Exploit DB Packet Storm

2228	7.5	HIGH Network	-	-	In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE packets while the service connection is still in RXRPC…	-	CVE-2026-31676	2026-04-28 03:32	2026-04-25	Show	GitHub Exploit DB Packet Storm

2229	-		-	-	In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit each RX scatterlist extraction to t…	-	CVE-2026-31677	2026-04-28 03:32	2026-04-25	Show	GitHub Exploit DB Packet Storm

2230	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached …	-	CVE-2026-31678	2026-04-28 03:32	2026-04-25	Show	GitHub Exploit DB Packet Storm