Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255231	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Windows OpenType Compact Font Format ドライバにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0033	2011-03-4 15:00	2011-02-8	Show	GitHub Exploit DB Packet Storm

255232	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における権限昇格の脆弱性	CWE-Other その他	CVE-2011-0038	2011-03-4 14:53	2011-02-8	Show	GitHub Exploit DB Packet Storm

255233	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0036	2011-03-4 14:50	2011-02-8	Show	GitHub Exploit DB Packet Storm

255234	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0035	2011-03-4 14:30	2011-02-8	Show	GitHub Exploit DB Packet Storm

255235	5	警告	日立	-	Hitachi Tuning Manager Software におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-03-4 14:24	2011-02-7	Show	GitHub Exploit DB Packet Storm

255236	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter NB100 および NB200 プラットフォームに複数の脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-4733	2011-03-4 14:21	2011-02-7	Show	GitHub Exploit DB Packet Storm

255237	4.3	警告	IBM サイバートラスト株式会社ヒューレット・パッカードターボリナックス OpenSSL Project VMware レッドハット	-	OpenSSL の kssl_keytab_is_available 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0433	2011-03-4 10:48	2010-03-24	Show	GitHub Exploit DB Packet Storm

255238	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0085	2011-03-4 10:45	2010-03-30	Show	GitHub Exploit DB Packet Storm

255239	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0084	2011-03-4 10:44	2010-03-30	Show	GitHub Exploit DB Packet Storm

255240	5.1	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の HotSpot Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0082	2011-03-4 10:43	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4341	7.8	HIGH Local	python	pillow	Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code e…	CWE-190 CWE-787 Integer Overflow or Wraparound Out-of-bounds Write	CVE-2026-42311	2026-05-15 05:27	2026-05-9	Show	GitHub Exploit DB Packet Storm

4342	7.6	HIGH Network	-	-	Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users to write attacker-controlled files to arbitrary locations by supplying a crafted…	CWE-22 Path Traversal	CVE-2026-45225	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4343	8.2	HIGH Network	-	-	Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/urlSafety.ts do not r…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42260	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4344	7.3	HIGH Network	-	-	An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allows attackers to execute arbitrary code via uploading a crafted file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2026-37430	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4345	7.5	HIGH Network	-	-	The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints. Critical functions such as updating memory records (PUT /memories/{memory_id}) are expos…	CWE-306 Missing Authentication for Critical Function	CVE-2026-31240	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4346	9.8	CRITICAL Network	-	-	The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.from_pretrained() method u…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31239	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4347	9.8	CRITICAL Network	-	-	The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. When starting a model server with the ludwig serve command, the framework loads mo…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31238	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4348	9.8	CRITICAL Network	-	-	The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, the framework auto…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31237	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4349	9.8	CRITICAL Network	-	-	The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function def…	CWE-94 Code Injection	CVE-2026-31236	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

4350	9.8	CRITICAL Network	-	-	The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize …	CWE-502 Deserialization of Untrusted Data	CVE-2026-31235	2026-05-15 05:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed