Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 22, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 265311 | 9.3 | 危険 | Artifex Software サイバートラスト株式会社 サン・マイクロシステムズ レッドハット |
- | ICC Format ライブラリにおける任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-0584 | 2010-02-17 11:44 | 2009-03-23 | Show | GitHub Exploit DB Packet Storm |
| 265312 | 9.3 | 危険 | Artifex Software サイバートラスト株式会社 サン・マイクロシステムズ レッドハット |
- | ICC Format ライブラリにおける整数オーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-0583 | 2010-02-17 11:43 | 2009-03-23 | Show | GitHub Exploit DB Packet Storm |
| 265313 | 6 | 警告 | Artifex Software サイバートラスト株式会社 レッドハット |
- | Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-0411 | 2010-02-17 11:43 | 2008-02-27 | Show | GitHub Exploit DB Packet Storm |
| 265314 | 2.1 | 注意 | サイバートラスト株式会社 レッドハット |
- | lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性 | - | CVE-2005-2672 | 2010-02-17 11:43 | 2005-08-22 | Show | GitHub Exploit DB Packet Storm |
| 265315 | 9.3 | 危険 | アップル | - | Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0037 | 2010-02-16 11:45 | 2010-01-19 | Show | GitHub Exploit DB Packet Storm |
| 265316 | 9.3 | 危険 | アップル | - | Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0036 | 2010-02-16 11:45 | 2010-01-19 | Show | GitHub Exploit DB Packet Storm |
| 265317 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-4003 | 2010-02-16 11:44 | 2010-01-19 | Show | GitHub Exploit DB Packet Storm |
| 265318 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4002 | 2010-02-16 11:44 | 2010-01-19 | Show | GitHub Exploit DB Packet Storm |
| 265319 | 6.9 | 警告 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel における競合状態の脆弱性 |
CWE-362
競合状態 |
CVE-2009-3547 | 2010-02-16 11:44 | 2009-11-3 | Show | GitHub Exploit DB Packet Storm |
| 265320 | 4.9 | 警告 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の netlink サブシステムにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2005-4881 | 2010-02-16 11:43 | 2009-10-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 22, 2026, 4:02 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 61 | 8.1 |
HIGH
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to… Update |
CWE-639
Authorization Bypass Through User-Controlled Key |
CVE-2026-13445 | 2026-07-21 02:53 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 62 | 6.5 |
MEDIUM
Network |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 windows_server_2019<… |
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. Update |
CWE-908
Use of Uninitialized Resource |
CVE-2026-50376 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 63 | 7.0 |
HIGH
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally. Update |
CWE-362
Race Condition |
CVE-2026-50378 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 64 | 9.9 |
CRITICAL
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system … Update |
CWE-94
Code Injection |
CVE-2026-8635 | 2026-07-21 02:48 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 65 | 7.5 |
HIGH
Network |
microsoft |
windows_11_24h2 windows_11_25h2 windows_11_26h1 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network. Update |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2026-50379 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 66 | 9.6 |
CRITICAL
Network |
microsoft |
windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 windows_server_2019<… |
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. Update |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-50380 | 2026-07-21 02:48 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 67 | 5.5 |
MEDIUM
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. Update |
CWE-126
Buffer Over-read |
CVE-2026-50383 | 2026-07-21 02:47 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 68 | 9.9 |
CRITICAL
Network |
langflow | langflow | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal … Update |
CWE-22
Path Traversal |
CVE-2026-8859 | 2026-07-21 02:47 | 2026-07-18 | Show | GitHub Exploit DB Packet Storm |
| 69 | 8.8 |
HIGH
Local |
microsoft |
windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2025 |
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. Update |
CWE-822
Untrusted Pointer Dereference |
CVE-2026-50382 | 2026-07-21 02:46 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |
| 70 | 8.8 |
HIGH
Local |
microsoft |
windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025 |
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally. Update |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2026-50385 | 2026-07-21 02:45 | 2026-07-15 | Show | GitHub Exploit DB Packet Storm |