Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
247581	6.4	警告	アップルサイバートラスト株式会社 Mozilla Foundation VMware レッドハット	-	Mozilla NSS における X.509 証明書を偽装される脆弱性	CWE-310 暗号の問題	CVE-2009-2409	2012-04-18 10:03	2009-07-30	Show	GitHub Exploit DB Packet Storm

247582	3.5	注意	サン・マイクロシステムズ Quagga サイバートラスト株式会社レッドハット	-	Quagga の bgpd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-4826	2012-04-17 18:25	2007-09-7	Show	GitHub Exploit DB Packet Storm

247583	5	警告	Quagga レッドハット	-	Quagga の bgpd におけるサービス運用妨害（Null ポインタデリファレンスおよびアプリケーションクラッシュ）の脆弱性	CWE-Other その他	CVE-2010-1674	2012-04-17 18:23	2011-03-29	Show	GitHub Exploit DB Packet Storm

247584	5	警告	Quagga レッドハット	-	Quagga の bgpd におけるサービス運用妨害 (セッションリセット) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1675	2012-04-17 18:22	2011-03-29	Show	GitHub Exploit DB Packet Storm

247585	6.5	警告	Quagga サイバートラスト株式会社レッドハット	-	Quagga の bgpd の bgp_route_refresh_receive 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2948	2012-04-17 18:20	2010-08-19	Show	GitHub Exploit DB Packet Storm

247586	5	警告	Quagga レッドハット	-	Quagga の bgpd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2949	2012-04-17 18:19	2010-08-19	Show	GitHub Exploit DB Packet Storm

247587	4.3	警告	Artifex Software	-	Ghostscript の gs_type2_interpret 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-4054	2012-04-17 17:38	2010-10-23	Show	GitHub Exploit DB Packet Storm

247588	9.3	危険	アップルレッドハット	-	複数の Apple 製品の LIBTIFF におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0192	2012-04-17 17:32	2011-03-3	Show	GitHub Exploit DB Packet Storm

247589	4.3	警告	LibTIFF レッドハット	-	LibTIFF の tiffdump.c 内にある ReadDirectory 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4665	2012-04-17 17:30	2011-04-9	Show	GitHub Exploit DB Packet Storm

247590	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の TIFFYCbCrtoRGB 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2595	2012-04-17 17:29	2010-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1081	7.8	HIGH Local	-	-	Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. New	CWE-77 CWE-80 Command Injection Basic XSS	CVE-2026-41611	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1082	5.5	MEDIUM Local	-	-	Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally. New	CWE-22 CWE-23 Path Traversal Relative Path Traversal	CVE-2026-41612	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1083	8.8	HIGH Network	-	-	Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. New	CWE-78 CWE-384 OS Command Session Fixation	CVE-2026-41613	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1084	7.8	HIGH Local	-	-	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. New	CWE-122 Heap-based Buffer Overflow	CVE-2026-42831	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1085	7.7	HIGH Local	-	-	Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. New	CWE-284 Improper Access Control	CVE-2026-42832	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1086	-		-	-	Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3. New	-	CVE-2026-8401	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1087	7.2	HIGH Network	-	-	An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax. This issue affe… New	CWE-77 Command Injection	CVE-2026-8431	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1088	8.8	HIGH Network	-	-	An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issu… New	CWE-787 Out-of-bounds Write	CVE-2026-8053	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1089	2.7	LOW Network	-	-	When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have all user data redacted. This is… New	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-8200	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

1090	4.3	MEDIUM Network	-	-	Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilizatio… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-8202	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed