Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258151	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1295	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

258152	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

258153	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

258154	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

258155	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

258156	1.9	注意	レッドハットサイバートラスト株式会社ターボリナックス Samba Project	-	Samba の mount.cifs における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2948	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

258157	6	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	Apple Mac OS の SMB サブシステムにおけるファイル共有の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2813	2010-07-20 18:01	2009-09-10	Show	GitHub Exploit DB Packet Storm

258158	5	警告	S2 Security	-	S2 Netbox に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2466	2010-07-16 18:41	2010-06-28	Show	GitHub Exploit DB Packet Storm

258159	4.3	警告	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスの WebVPN における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-7257	2010-07-16 18:41	2010-06-29	Show	GitHub Exploit DB Packet Storm

258160	7.5	危険	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における link インジェクションの脆弱性	CWE-noinfo 情報不足	CVE-2010-2324	2010-07-16 18:40	2010-06-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4761	6.5	MEDIUM Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set. In src/bgp_protocol.hpp, the parse_raw_…	CWE-130 Improper Handling of Length Parameter Inconsistency	CVE-2026-48685	2026-05-27 23:23	2026-05-27	Show	GitHub Exploit DB Packet Storm

4762	9.8	CRITICAL Network	pavel-odintsov	fastnetmon	FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_encoding_ipv4_raw() …	CWE-120 CWE-787 Classic Buffer Overflow Out-of-bounds Write	CVE-2026-48686	2026-05-27 23:23	2026-05-27	Show	GitHub Exploit DB Packet Storm

4763	-		-	-	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issuer, enabling certifi…	CWE-295 CWE-296 Improper Certificate Validation Improper Following of a Certificate's Chain of Trust	CVE-2026-42789	2026-05-27 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4764	3.3	LOW Local	-	-	NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated strin…	CWE-190 Integer Overflow or Wraparound	CVE-2026-39824	2026-05-27 23:16	2026-05-23	Show	GitHub Exploit DB Packet Storm

4765	-		-	-	An issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16_t varia…	-	CVE-2026-38427	2026-05-27 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4766	-		-	-	Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.boundary[40], strcpy() fu…	-	CVE-2026-38426	2026-05-27 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4767	-		-	-	In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to …	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2026-35090	2026-05-27 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4768	-		-	-	In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtained without authentication. An unauthenticated attacker can …	CWE-1391 Use of Weak Credentials	CVE-2026-35089	2026-05-27 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4769	-		-	-	Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. This issue was fixed…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2026-35087	2026-05-27 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4770	4.3	MEDIUM Network	traccar	traccar	Traccar is an open source GPS tracking system. Prior to 6.13.0, DeviceResource.uploadImage authorizes the target device only through Condition.Permission(User.class, getUserId(), Device.class) and th…	CWE-863 Incorrect Authorization	CVE-2026-44314	2026-05-27 23:02	2026-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed