Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251991 4 警告 Linux
レッドハット
- Linux kernel の bcm_connect 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3874 2011-01-31 15:49 2010-12-8 Show GitHub Exploit DB Packet Storm
251992 1.9 注意 Linux
レッドハット
- Linux kernel の viafb_ioctl_get_viafb_info 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4082 2011-01-31 15:40 2010-11-30 Show GitHub Exploit DB Packet Storm
251993 1.9 注意 Linux
レッドハット
- Linux kernel の ivtvfb_ioctl 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4079 2011-01-31 15:03 2010-11-29 Show GitHub Exploit DB Packet Storm
251994 1.9 注意 Linux
レッドハット
- Linux kernel の USB サブシステムにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4074 2011-01-31 15:01 2010-11-29 Show GitHub Exploit DB Packet Storm
251995 2.1 注意 Linux
レッドハット
- Linux kernel の ethtool_get_rxnfc 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3861 2011-01-31 14:56 2010-12-10 Show GitHub Exploit DB Packet Storm
251996 4.9 警告 Linux
レッドハット
- Linux kernel の hso_get_count 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3298 2011-01-28 16:03 2010-09-30 Show GitHub Exploit DB Packet Storm
251997 4.9 警告 Linux
レッドハット
- Linux kernel の sound/core/seq/oss/seq_oss_init.c 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-3080 2011-01-28 15:59 2010-09-20 Show GitHub Exploit DB Packet Storm
251998 9.3 危険 マイクロソフト - Microsoft Windows Vista の sdclt.exe にて使用される BitLocker Drive Encryption API における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3145 2011-01-28 15:56 2011-01-11 Show GitHub Exploit DB Packet Storm
251999 9.3 危険 マイクロソフト - MDAC および WDAC における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0027 2011-01-28 15:53 2011-01-11 Show GitHub Exploit DB Packet Storm
252000 9.3 危険 マイクロソフト - MDAC および WDAC の SQLConnectW 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2011-0026 2011-01-28 15:50 2011-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 4.7 MEDIUM
Network
- - A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the component GET Parame… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7394 2026-04-30 03:16 2026-04-30 Show GitHub Exploit DB Packet Storm
1002 8.6 HIGH
Network
- - A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could ca… CWE-130
 Improper Handling of Length Parameter Inconsistency
CVE-2026-5367 2026-04-30 03:16 2026-04-24 Show GitHub Exploit DB Packet Storm
1003 6.5 MEDIUM
Network
vmware spring_ai In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`. Affected versions: Spring AI: 1.0.0 - 1.… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-40980 2026-04-30 03:15 2026-04-28 Show GitHub Exploit DB Packet Storm
1004 7.1 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea + nlen + 1 + vlen as the end of the EA n… CWE-125
Out-of-bounds Read
CVE-2026-31614 2026-04-30 03:03 2026-04-25 Show GitHub Exploit DB Packet Storm
1005 8.8 HIGH
Network
tenda f456_firmware A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Re… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7101 2026-04-30 02:42 2026-04-27 Show GitHub Exploit DB Packet Storm
1006 8.8 HIGH
Network
tenda f456_firmware A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac results in comm… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7102 2026-04-30 02:41 2026-04-27 Show GitHub Exploit DB Packet Storm
1007 5.5 MEDIUM
Local
foxit pdf_editor
pdf_reader
Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the program to terminate. CWE-248
 Uncaught Exception
CVE-2026-5937 2026-04-30 02:31 2026-04-27 Show GitHub Exploit DB Packet Storm
1008 5.5 MEDIUM
Local
foxit pdf_editor
pdf_reader
Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service. CWE-691
 Insufficient Control Flow Management
CVE-2026-5938 2026-04-30 02:29 2026-04-27 Show GitHub Exploit DB Packet Storm
1009 5.5 MEDIUM
Local
foxit pdf_editor
pdf_reader
A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution. CWE-416
 Use After Free
CVE-2026-5939 2026-04-30 02:28 2026-04-27 Show GitHub Exploit DB Packet Storm
1010 5.5 MEDIUM
Local
foxit pdf_editor
pdf_reader
Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes. CWE-416
 Use After Free
CVE-2026-5940 2026-04-30 02:26 2026-04-27 Show GitHub Exploit DB Packet Storm