Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253961	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4194	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

253962	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4193	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

253963	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4192	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

253964	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4191	2011-03-11 18:20	2011-02-8	Show	GitHub Exploit DB Packet Storm

253965	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の ImageIO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0846	2011-03-11 10:16	2010-03-30	Show	GitHub Exploit DB Packet Storm

253966	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の ImageIO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0841	2011-03-11 10:11	2010-03-30	Show	GitHub Exploit DB Packet Storm

253967	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	Oracle Sun Java が Java アプレットの署名を正しく検証しない脆弱性	CWE-noinfo 情報不足	CVE-2010-0087	2011-03-11 10:10	2010-04-6	Show	GitHub Exploit DB Packet Storm

253968	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0838	2011-03-11 10:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

253969	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0839	2011-03-11 10:08	2010-03-30	Show	GitHub Exploit DB Packet Storm

253970	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0847	2011-03-11 10:07	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3401	5.2	MEDIUM Local	-	-	There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traver…	CWE-269 Improper Privilege Management	CVE-2026-40001	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

3402	6.3	MEDIUM Local	-	-	A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hard…	CWE-1241 Use of Predictable Algorithm in Random Number Generator	CVE-2026-6420	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

3403	6.8	MEDIUM Network	-	-	Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the lowest authenticated role, hold…	CWE-863 Incorrect Authorization	CVE-2026-6863	2026-05-7 23:56	2026-05-7	Show	GitHub Exploit DB Packet Storm

3404	6.8	MEDIUM Network	-	-	Admidio is an open-source user management solution. Prior to version 5.0.9, the OIDC token introspection endpoint (/modules/sso/index.php/oidc/introspect) always returns {"active": true} for every re…	CWE-287 Improper Authentication	CVE-2026-41671	2026-05-7 23:54	2026-05-7	Show	GitHub Exploit DB Packet Storm

3405	-		-	-	A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the w…	CWE-88 Argument Injection	CVE-2026-7865	2026-05-7 23:53	2026-05-6	Show	GitHub Exploit DB Packet Storm

3406	9.1	CRITICAL Network	-	-	Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the value of the UNIQUE_…	CWE-340 Generation of Predictable Numbers or Identifiers	CVE-2026-5081	2026-05-7 23:52	2026-05-6	Show	GitHub Exploit DB Packet Storm

3407	7.5	HIGH Network	-	-	A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive …	-	CVE-2026-23870	2026-05-7 23:52	2026-05-7	Show	GitHub Exploit DB Packet Storm

3408	6.5	MEDIUM Network	-	-	RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x…	CWE-295 Improper Certificate Validation	CVE-2025-42611	2026-05-7 23:51	2026-05-5	Show	GitHub Exploit DB Packet Storm

3409	-		-	-	An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user to alter or delete arbitrary data…	CWE-20 CWE-352 CWE-917 Improper Input Validation Origin Validation Error Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-28201	2026-05-7 23:51	2026-05-7	Show	GitHub Exploit DB Packet Storm

3410	-		-	-	Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (S…	CWE-20 Improper Input Validation	CVE-2026-33587	2026-05-7 23:51	2026-05-7	Show	GitHub Exploit DB Packet Storm