Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255471	9.3	危険	アップル	-	Apple Mac OS X の Disk Image における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1841	2010-11-29 15:45	2010-11-15	Show	GitHub Exploit DB Packet Storm

255472	7.5	危険	アップル	-	Apple Mac OS X の password-validation 機能におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1840	2010-11-29 15:43	2010-11-15	Show	GitHub Exploit DB Packet Storm

255473	4.4	警告	アップル	-	Apple Mac OS X の Directory Services における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-1838	2010-11-29 15:41	2010-11-15	Show	GitHub Exploit DB Packet Storm

255474	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2174	2010-11-29 15:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

255475	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2173	2010-11-29 15:26	2010-06-10	Show	GitHub Exploit DB Packet Storm

255476	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2172	2010-11-29 15:25	2010-06-10	Show	GitHub Exploit DB Packet Storm

255477	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2171	2010-11-29 15:24	2010-06-10	Show	GitHub Exploit DB Packet Storm

255478	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2170	2010-11-29 15:21	2010-06-10	Show	GitHub Exploit DB Packet Storm

255479	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2169	2010-11-29 15:18	2010-06-10	Show	GitHub Exploit DB Packet Storm

255480	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2167	2010-11-29 15:17	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3981	9.8	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full sandbox escape with arbitrary code execution. Attacker code inside VM.run() obtains host process object and …	CWE-693 Protection Mechanism Failure	CVE-2026-26956	2026-05-9 04:15	2026-05-5	Show	GitHub Exploit DB Packet Storm

3982	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that `#mbox-cells` must be at least 1, there…	CWE-125 Out-of-bounds Read	CVE-2026-43281	2026-05-9 04:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

3983	8.8	HIGH Network	jupyter	jupyter_server	Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_d…	CWE-22 Path Traversal	CVE-2026-35397	2026-05-9 04:11	2026-05-6	Show	GitHub Exploit DB Packet Storm

3984	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port The function ionic_query_port() calls ib_device_get_netdev…	CWE-476 NULL Pointer Dereference	CVE-2026-43282	2026-05-9 04:09	2026-05-6	Show	GitHub Exploit DB Packet Storm

3985	7.5	HIGH Network	thecodingmachine	gotenberg	Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-se…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-40280	2026-05-9 04:06	2026-05-6	Show	GitHub Exploit DB Packet Storm

3986	7.8	HIGH Local	osgeo	gdal	A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName lead…	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-8086	2026-05-9 04:04	2026-05-8	Show	GitHub Exploit DB Packet Storm

3987	7.8	HIGH Local	osgeo	gdal	A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frmts/hdf4/hdf-eos/GDapi.c. Performing a manipulation of the argument DataFieldNam…	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-8087	2026-05-9 04:03	2026-05-8	Show	GitHub Exploit DB Packet Storm

3988	7.2	HIGH Network	thecodingmachine	gotenberg	Gotenberg is an API-based document conversion tool. In version 8.29.1, an unauthenticated attacker with network access can force the server to make outbound HTTP POST requests to arbitrary internal o…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-39383	2026-05-9 04:02	2026-05-6	Show	GitHub Exploit DB Packet Storm

3989	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is supplied, it is copied and then hashed i…	NVD-CWE-noinfo	CVE-2026-43044	2026-05-9 03:58	2026-05-2	Show	GitHub Exploit DB Packet Storm

3990	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AF_ALG interface fails to unmark the end of a Scatter/Gather Lis…	CWE-476 NULL Pointer Dereference	CVE-2026-43043	2026-05-9 03:57	2026-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed