Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 22, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
264861 6.9 警告 KDE project
サイバートラスト株式会社
レッドハット		 - KDE の KDM における制御ソケットの処理に関する権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-0436 2010-05-18 16:39 2010-04-13 Show GitHub Exploit DB Packet Storm
264862 1.9 注意 レッドハット - Free Software Foundation Berkeley DB の NSS モジュールにおける情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2010-0826 2010-05-18 16:38 2010-04-5 Show GitHub Exploit DB Packet Storm
264863 7.8 危険 日本電気 - CapsSuite Small Edition PatchMeister におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1943 2010-05-17 12:03 2010-05-17 Show GitHub Exploit DB Packet Storm
264864 7.8 危険 日本電気 - WebSAM DeploymentManager におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1941 2010-05-17 12:02 2010-05-17 Show GitHub Exploit DB Packet Storm
264865 6.4 警告 富士通 - Interstage Application Server におけるリクエスト処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-1942 2010-05-17 12:01 2010-05-17 Show GitHub Exploit DB Packet Storm
264866 2.1 注意 オラクル - Oracle Sun Product Suite の Sun Cluster コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0884 2010-05-14 18:43 2010-04-13 Show GitHub Exploit DB Packet Storm
264867 2.1 注意 オラクル - Oracle Sun Product Suite の Sun Cluster コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0883 2010-05-14 18:43 2010-04-13 Show GitHub Exploit DB Packet Storm
264868 2.1 注意 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0890 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
264869 3.6 注意 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0895 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
264870 4.3 警告 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0893 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 22, 2026, 4:02 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 8.1 HIGH
Network 		langflow langflow IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to… Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-13445 2026-07-21 02:53 2026-07-18 Show GitHub Exploit DB Packet Storm
62 6.5 MEDIUM
Network 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
windows_server_2019<… 		Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. Update CWE-908
 Use of Uninitialized Resource 		CVE-2026-50376 2026-07-21 02:48 2026-07-15 Show GitHub Exploit DB Packet Storm
63 7.0 HIGH
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2025 		Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally. Update CWE-362
Race Condition 		CVE-2026-50378 2026-07-21 02:48 2026-07-15 Show GitHub Exploit DB Packet Storm
64 9.9 CRITICAL
Network 		langflow langflow IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system … Update CWE-94
Code Injection 		CVE-2026-8635 2026-07-21 02:48 2026-07-18 Show GitHub Exploit DB Packet Storm
65 7.5 HIGH
Network 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1 		Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. Update CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-50379 2026-07-21 02:48 2026-07-15 Show GitHub Exploit DB Packet Storm
66 9.6 CRITICAL
Network 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
windows_server_2019<… 		Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. Update CWE-122
Heap-based Buffer Overflow 		CVE-2026-50380 2026-07-21 02:48 2026-07-15 Show GitHub Exploit DB Packet Storm
67 5.5 MEDIUM
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2025 		Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. Update CWE-126
 Buffer Over-read 		CVE-2026-50383 2026-07-21 02:47 2026-07-15 Show GitHub Exploit DB Packet Storm
68 9.9 CRITICAL
Network 		langflow langflow IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal … Update CWE-22
Path Traversal 		CVE-2026-8859 2026-07-21 02:47 2026-07-18 Show GitHub Exploit DB Packet Storm
69 8.8 HIGH
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2025 		Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. Update CWE-822
 Untrusted Pointer Dereference 		CVE-2026-50382 2026-07-21 02:46 2026-07-15 Show GitHub Exploit DB Packet Storm
70 8.8 HIGH
Local 		microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025 		Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. Update CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2026-50385 2026-07-21 02:45 2026-07-15 Show GitHub Exploit DB Packet Storm