Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 21, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 264921 | 10 | 危険 | サン・マイクロシステムズ サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-2462 | 2010-04-1 13:34 | 2009-07-21 | Show | GitHub Exploit DB Packet Storm |
| 264922 | 7.2 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の fasync_helper 関数における権限昇格の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-4141 | 2010-03-29 15:18 | 2010-01-19 | Show | GitHub Exploit DB Packet Storm |
| 264923 | 9.3 | 危険 | アップル | - | Apple Safari における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0045 | 2010-03-25 11:49 | 2010-03-15 | Show | GitHub Exploit DB Packet Storm |
| 264924 | 4.3 | 警告 | アップル | - | Apple Safari の PubSub における Cookie が設定される脆弱性 |
CWE-16
環境設定 |
CVE-2010-0044 | 2010-03-25 11:49 | 2010-03-15 | Show | GitHub Exploit DB Packet Storm |
| 264925 | 7.5 | 危険 | サン・マイクロシステムズ GNU Project サイバートラスト株式会社 レッドハット |
- | GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-4476 | 2010-03-25 11:47 | 2007-08-17 | Show | GitHub Exploit DB Packet Storm |
| 264926 | 7.8 | 危険 | VMware | - | VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-3282 | 2010-03-24 12:23 | 2009-10-1 | Show | GitHub Exploit DB Packet Storm |
| 264927 | 7.2 | 危険 | VMware | - | VMware Fusion の vmx86 のカーネル拡張における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3281 | 2010-03-24 12:22 | 2009-10-1 | Show | GitHub Exploit DB Packet Storm |
| 264928 | 9.3 | 危険 | VMware | - | 複数の VMware 製品の VMnc media コーデックにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-2628 | 2010-03-24 12:22 | 2009-09-4 | Show | GitHub Exploit DB Packet Storm |
| 264929 | 9.3 | 危険 | VMware | - | 複数の VMware 製品の VMnc media コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-0199 | 2010-03-24 12:22 | 2009-09-4 | Show | GitHub Exploit DB Packet Storm |
| 264930 | 5 | 警告 | VMware | - | VMware Studio の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-2968 | 2010-03-24 12:22 | 2009-08-31 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 22, 2026, 4:02 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 61 | 8.1 |
HIGH
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to… New |
CWE-639
Authorization Bypass Through User-Controlled Key |
CVE-2026-13445 | 2026-07-21 02:53 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 62 | 6.5 |
MEDIUM
Network |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 windows_server_2019<… |
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. Update |
CWE-908
Use of Uninitialized Resource |
CVE-2026-50376 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 63 | 7.0 |
HIGH
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally. Update |
CWE-362
Race Condition |
CVE-2026-50378 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 64 | 9.9 |
CRITICAL
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system … New |
CWE-94
Code Injection |
CVE-2026-8635 | 2026-07-21 02:48 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 65 | 7.5 |
HIGH
Network |
microsoft |
windows_11_24h2 windows_11_25h2 windows_11_26h1 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. Update |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2026-50379 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 66 | 9.6 |
CRITICAL
Network |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 windows_server_2019<… |
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. Update |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-50380 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 67 | 5.5 |
MEDIUM
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. Update |
CWE-126
Buffer Over-read |
CVE-2026-50383 | 2026-07-21 02:47 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 68 | 9.9 |
CRITICAL
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal … New |
CWE-22
Path Traversal |
CVE-2026-8859 | 2026-07-21 02:47 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 69 | 8.8 |
HIGH
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. Update |
CWE-822
Untrusted Pointer Dereference |
CVE-2026-50382 | 2026-07-21 02:46 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 70 | 8.8 |
HIGH
Local |
microsoft |
windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. Update |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2026-50385 | 2026-07-21 02:45 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |