Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253381	6.2	警告	ヒューレット・パッカード	-	HP Palm webOS のサービス API における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-4026	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

253382	9.3	危険	ヒューレット・パッカード	-	HP Palm webOS の Doc Viewer における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-4025	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

253383	6.8	警告	ヒューレット・パッカード	-	HP Insight Control Power Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4024	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

253384	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Power Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4023	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

253385	6.2	警告	アップル	-	Apple の iOS におけるパスワードロックを回避される脆弱性	CWE-362 競合状態	CVE-2010-4012	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

253386	5	警告	オラクル	-	Oracle Mojarra における View State を変更される脆弱性	CWE-310 暗号の問題	CVE-2010-4007	2012-03-27 18:42	2010-10-20	Show	GitHub Exploit DB Packet Storm

253387	7.5	危険	wsnlinks	-	WSN Links の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4006	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

253388	6.9	警告	GNOME Project	-	GNOME Tomboy の tomboy スクリプトにおける権限を取得される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4005	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

253389	6.9	警告	GNOME Project	-	GNOME Shell の gnome-shell における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4000	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

253390	6.9	警告	gnucash	-	GnuCash の gnc-test-env における権限を取得される脆弱性	CWE-DesignError	CVE-2010-3999	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
5121	7.5	HIGH Network	golang	crypto	An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.	CWE-704 Incorrect Type Conversion or Cast	CVE-2026-46597	2026-05-28 23:44	2026-05-22	Show	GitHub Exploit DB Packet Storm

5122	5.3	MEDIUM Network	golang	crypto	For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.	CWE-129 Improper Validation of Array Index	CVE-2026-46598	2026-05-28 23:34	2026-05-22	Show	GitHub Exploit DB Packet Storm

5123	5.5	MEDIUM Local	gpac	gpac	A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media.c of the component MP4Box. Such manipulation of t…	CWE-401 CWE-404 Missing Release of Memory after Effective Lifetime Improper Resource Shutdown or Release	CVE-2026-9572	2026-05-28 23:32	2026-05-27	Show	GitHub Exploit DB Packet Storm

5124	5.3	MEDIUM Network	rexxars	eventsource-encoder	eventsource-encoder encodes events as well-formed EventSource/Server Sent Event (SSE) messages. Prior to 1.0.2, eventsource-encoder does not sanitize the event or id fields of an EventSourceMessage b…	CWE-93 CWE-113 CRLF Injection HTTP Response Splitting	CVE-2026-44214	2026-05-28 23:30	2026-05-27	Show	GitHub Exploit DB Packet Storm

5125	7.3	HIGH Network	-	-	A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer ove…	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-9605	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

5126	6.3	MEDIUM Network	-	-	A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can …	CWE-266 CWE-284 Incorrect Privilege Assignment Improper Access Control	CVE-2026-9581	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

5127	7.5	HIGH Network	archive\	\	Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), …	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-9538	2026-05-28 23:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

5128	7.5	HIGH Network	-	-	The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.	CWE-524 Use of Cache Containing Sensitive Information	CVE-2026-48901	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

5129	7.8	HIGH Local	-	-	A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker ca…	CWE-787 Out-of-bounds Write	CVE-2026-48864	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

5130	7.7	HIGH Network	-	-	Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking the IP blacklist, …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45715	2026-05-28 23:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed