Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 22, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 264971 | 9.3 | 危険 | アドビシステムズ レッドハット |
- | Adobe Reader および Acrobat における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0195 | 2010-04-28 15:57 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264972 | 9.3 | 危険 | アドビシステムズ レッドハット |
- | Adobe Reader および Acrobat における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0194 | 2010-04-28 15:57 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264973 | 9.3 | 危険 | アドビシステムズ レッドハット |
- | Adobe Reader および Acrobat における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0193 | 2010-04-28 15:57 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264974 | 9.3 | 危険 | アドビシステムズ レッドハット |
- | Adobe Reader および Acrobat における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0192 | 2010-04-28 15:57 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264975 | 9.3 | 危険 | アドビシステムズ レッドハット |
- | Adobe Reader および Acrobat における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0191 | 2010-04-28 15:56 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264976 | 4.3 | 警告 | アドビシステムズ レッドハット |
- | Adobe Reader および Acrobat におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0190 | 2010-04-28 15:56 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 264977 | 7.8 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4537 | 2010-04-28 15:21 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 264978 | 4.3 | 警告 | IBM Apache Software Foundation アップル サイバートラスト株式会社 ヒューレット・パッカード ターボリナックス レッドハット |
- | Apache の mod_proxy_ftp における UTF-7 エンコードに関するクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0005 | 2010-04-28 15:18 | 2008-01-11 | Show | GitHub Exploit DB Packet Storm |
| 264979 | 10 | 危険 | IntelliCom Innovation AB | - | IntelliCom NetBiter デバイスにおけるデフォルトパスワードの問題 |
CWE-255
証明書・パスワード管理 |
CVE-2009-4463 | 2010-04-27 16:10 | 2010-04-7 | Show | GitHub Exploit DB Packet Storm |
| 264980 | 9.3 | 危険 | Foxit Software Inc | - | Foxit Reader に任意のコード実行が可能な脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-1239 | 2010-04-27 16:10 | 2010-04-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 22, 2026, 4:02 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 61 | 8.1 |
HIGH
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to… Update |
CWE-639
Authorization Bypass Through User-Controlled Key |
CVE-2026-13445 | 2026-07-21 02:53 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 62 | 6.5 |
MEDIUM
Network |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 windows_server_2019<… |
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. Update |
CWE-908
Use of Uninitialized Resource |
CVE-2026-50376 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 63 | 7.0 |
HIGH
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally. Update |
CWE-362
Race Condition |
CVE-2026-50378 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 64 | 9.9 |
CRITICAL
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system … Update |
CWE-94
Code Injection |
CVE-2026-8635 | 2026-07-21 02:48 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 65 | 7.5 |
HIGH
Network |
microsoft |
windows_11_24h2 windows_11_25h2 windows_11_26h1 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. Update |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2026-50379 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 66 | 9.6 |
CRITICAL
Network |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 windows_server_2019<… |
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. Update |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-50380 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 67 | 5.5 |
MEDIUM
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. Update |
CWE-126
Buffer Over-read |
CVE-2026-50383 | 2026-07-21 02:47 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 68 | 9.9 |
CRITICAL
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal … Update |
CWE-22
Path Traversal |
CVE-2026-8859 | 2026-07-21 02:47 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 69 | 8.8 |
HIGH
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. Update |
CWE-822
Untrusted Pointer Dereference |
CVE-2026-50382 | 2026-07-21 02:46 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 70 | 8.8 |
HIGH
Local |
microsoft |
windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. Update |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2026-50385 | 2026-07-21 02:45 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |