Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
233081	7.5	危険	サイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の CORBA コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3561	2012-12-19 18:10	2010-10-12	Show	GitHub Exploit DB Packet Storm

233082	2.6	注意	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3560	2012-12-19 18:05	2010-10-12	Show	GitHub Exploit DB Packet Storm

233083	10	危険	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4465	2012-12-19 17:23	2011-02-15	Show	GitHub Exploit DB Packet Storm

233084	10	危険	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4462	2012-12-19 17:23	2011-02-15	Show	GitHub Exploit DB Packet Storm

233085	10	危険	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4454	2012-12-19 17:22	2011-02-15	Show	GitHub Exploit DB Packet Storm

233086	6.9	警告	VMware Linux レッドハット	-	Linux kernel の drivers/char/agp/generic.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1746	2012-12-19 17:02	2011-05-9	Show	GitHub Exploit DB Packet Storm

233087	6.9	警告	VMware Linux レッドハット	-	Linux kernel の agp_generic_insert_memory 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1745	2012-12-19 17:01	2011-05-9	Show	GitHub Exploit DB Packet Storm

233088	4.9	警告	VMware Linux レッドハット	-	Linux kernel の next_pidmap 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1593	2012-12-19 17:00	2011-05-3	Show	GitHub Exploit DB Packet Storm

233089	5	警告	VMware Linux	-	Linux kernel の net/sctp/sm_make_chunk.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1573	2012-12-19 16:59	2012-02-2	Show	GitHub Exploit DB Packet Storm

233090	5	警告	Expat IBM Apache Software Foundation サイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	Expat の libexpat におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3720	2012-12-19 16:59	2009-11-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
911	6.5	MEDIUM Network	-	-	Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized…	CWE-787 Out-of-bounds Write	CVE-2026-8669	2026-05-19 02:40	2026-05-16	Show	GitHub Exploit DB Packet Storm

912	7.5	HIGH Network	-	-	Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.	CWE-331 Insufficient Entropy	CVE-2026-46474	2026-05-19 02:40	2026-05-16	Show	GitHub Exploit DB Packet Storm

913	7.3	HIGH Network	-	-	Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.	CWE-331 Insufficient Entropy	CVE-2026-8700	2026-05-19 02:40	2026-05-16	Show	GitHub Exploit DB Packet Storm

914	6.5	MEDIUM Network	-	-	Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.	CWE-552 Files or Directories Accessible to External Parties	CVE-2026-8704	2026-05-19 02:40	2026-05-16	Show	GitHub Exploit DB Packet Storm

915	8.2	HIGH Network	-	-	Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources c…	CWE-93 CRLF Injection	CVE-2026-46720	2026-05-19 02:40	2026-05-18	Show	GitHub Exploit DB Packet Storm

916	9.8	CRITICAL Network	-	-	Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info(…	CWE-787 Out-of-bounds Write	CVE-2026-8507	2026-05-19 02:40	2026-05-18	Show	GitHub Exploit DB Packet Storm

917	9.8	CRITICAL Network	-	-	Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to Sv…	CWE-170 Improper Null Termination	CVE-2026-8721	2026-05-19 02:40	2026-05-18	Show	GitHub Exploit DB Packet Storm

918	7.8	HIGH Local	-	-	VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place ma…	CWE-428 Unquoted Search Path or Element	CVE-2021-47974	2026-05-19 02:38	2026-05-17	Show	GitHub Exploit DB Packet Storm

919	8.4	HIGH Local	-	-	VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craf…	CWE-120 Classic Buffer Overflow	CVE-2018-25328	2026-05-19 02:38	2026-05-17	Show	GitHub Exploit DB Packet Storm

920	6.5	MEDIUM Network	-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), th…	CWE-862 Missing Authorization	CVE-2026-44571	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm