Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253231 10 危険 マイクロソフト - Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0477 2010-05-10 19:10 2010-04-13 Show GitHub Exploit DB Packet Storm
253232 10 危険 マイクロソフト - Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0476 2010-05-10 19:10 2010-04-13 Show GitHub Exploit DB Packet Storm
253233 10 危険 マイクロソフト - Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0270 2010-05-10 19:10 2010-04-13 Show GitHub Exploit DB Packet Storm
253234 10 危険 マイクロソフト - Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0269 2010-05-10 19:09 2010-04-13 Show GitHub Exploit DB Packet Storm
253235 9.3 危険 マイクロソフト - Microsoft Windows の Cabinet File Viewer Shell Extension における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0487 2010-05-10 19:09 2010-04-13 Show GitHub Exploit DB Packet Storm
253236 9.3 危険 マイクロソフト - Microsoft Windows の Authenticode Signature Verification における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0486 2010-05-10 19:09 2010-04-13 Show GitHub Exploit DB Packet Storm
253237 4.7 警告 サイバートラスト株式会社
Linux
レッドハット		 - x86_64 および amd64 プラットフォーム上 Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4271 2010-05-10 18:25 2010-03-16 Show GitHub Exploit DB Packet Storm
253238 5 警告 VMware - VMware Authorization Service の VMware Authentication Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2009-3707 2010-05-7 17:26 2009-10-16 Show GitHub Exploit DB Packet Storm
253239 9.3 危険 VMware - VMnc メディアコーデックおよびムービーデコーダにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-1565 2010-05-7 17:26 2010-04-9 Show GitHub Exploit DB Packet Storm
253240 9.3 危険 VMware - VMnc メディアコーデックおよびムービーデコーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1564 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1151 7.8 HIGH
Local 		lizardsystems lanspy LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payloa… Update CWE-787
 Out-of-bounds Write 		CVE-2018-25268 2026-04-28 02:25 2026-04-23 Show GitHub Exploit DB Packet Storm
1152 9.8 CRITICAL
Network 		thinkphp thinkphp ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can c… Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2018-25270 2026-04-28 02:20 2026-04-23 Show GitHub Exploit DB Packet Storm
1153 5.5 MEDIUM
Local 		helios textpad Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attacke… Update CWE-787
 Out-of-bounds Write 		CVE-2018-25271 2026-04-28 02:13 2026-04-23 Show GitHub Exploit DB Packet Storm
1154 9.8 CRITICAL
Network 		dell powerprotect_dp_series_appliance
data_domain_operating_system 		Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0… Update CWE-121
CWE-787
Stack-based Buffer Overflow
 Out-of-bounds Write 		CVE-2026-26354 2026-04-28 02:09 2026-04-23 Show GitHub Exploit DB Packet Storm
1155 9.1 CRITICAL
Network 		espocrm espocrm EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, EspoCRM's built-in formula scripting engine allowing updating attachment's sourceId thus allowing an au… Update CWE-22
Path Traversal 		CVE-2026-33656 2026-04-28 02:04 2026-04-23 Show GitHub Exploit DB Packet Storm
1156 7.8 HIGH
Local 		radare radare2 radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with … Update CWE-78
OS Command  		CVE-2026-40517 2026-04-28 02:04 2026-04-23 Show GitHub Exploit DB Packet Storm
1157 7.5 HIGH
Network 		powerdns recursor An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-33256 2026-04-28 02:04 2026-04-22 Show GitHub Exploit DB Packet Storm
1158 7.5 HIGH
Network 		powerdns authoritative
dnsdist
recursor 		An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-33257 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm
1159 7.5 HIGH
Network 		powerdns recursor By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches. Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-33258 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm
1160 5.0 MEDIUM
Network 		powerdns recursor Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zone can only occur wi… Update CWE-416
 Use After Free 		CVE-2026-33259 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm