Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253271	9.3	危険	Foxit Software Inc	-	Foxit Reader に任意のコード実行が可能な脆弱性	CWE-94 コード・インジェクション	CVE-2010-1239	2010-04-27 16:10	2010-04-6	Show	GitHub Exploit DB Packet Storm

253272	10	危険	ヒューレット・パッカード	-	Broadcom NetXtreme 管理用ファームウェアにバッファオーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-0104	2010-04-27 16:09	2010-03-31	Show	GitHub Exploit DB Packet Storm

253273	6.8	警告	アップル	-	AirPort Utility におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2822	2010-04-27 16:09	2010-03-31	Show	GitHub Exploit DB Packet Storm

253274	9.3	危険	アップル	-	Apple Safari の ColorSync における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0040	2010-04-27 15:20	2010-03-15	Show	GitHub Exploit DB Packet Storm

253275	4	警告	Squid-cache.org サイバートラスト株式会社ターボリナックスレッドハット	-	Squid の lib/rfc1035.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0308	2010-04-27 15:20	2010-01-28	Show	GitHub Exploit DB Packet Storm

253276	6.8	警告	アップル	-	Apple Mac OS X の QuickDraw Manager におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2837	2010-04-27 15:20	2009-11-9	Show	GitHub Exploit DB Packet Storm

253277	5	警告	Squid-cache.org サイバートラスト株式会社ターボリナックスレッドハット	-	Squid の strListGetItem 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2855	2010-04-27 15:19	2009-08-18	Show	GitHub Exploit DB Packet Storm

253278	4.3	警告	アップルサイバートラスト株式会社 LibTIFF サン・マイクロシステムズレッドハット	-	libtiff の LZWDecodeCompat 関数におけるバッファアンダーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2285	2010-04-27 15:19	2009-07-1	Show	GitHub Exploit DB Packet Storm

253279	4.3	警告	サイバートラスト株式会社レッドハット	-	Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性	-	CVE-2006-7176	2010-04-27 15:18	2007-03-27	Show	GitHub Exploit DB Packet Storm

253280	6.9	警告	アップル	-	Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0532	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3141	4.9	MEDIUM Network	openbao	openbao	OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, when OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, OpenBao failed to use …	CWE-89 SQL Injection	CVE-2026-39946	2026-04-24 22:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

3142	3.1	LOW Network	openbao	openbao	OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, OpenBao's Certificate authentication method, when a token renewal is requested and `disable_binding=true` i…	CWE-295 Improper Certificate Validation	CVE-2026-39388	2026-04-24 22:27	2026-04-21	Show	GitHub Exploit DB Packet Storm

3143	7.6	HIGH Network	openremote	openremote	OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled XML without explicit XXE hardening. An authenticated user wh…	CWE-611 XXE	CVE-2026-40882	2026-04-24 22:24	2026-04-23	Show	GitHub Exploit DB Packet Storm

3144	8.3	HIGH Network	rustfs	rustfs	RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-alpha.94, all four notification target admin API endpoints in `rustfs/src/admin/handlers/event.rs` use a `check_permissions…	CWE-862 Missing Authorization	CVE-2026-40937	2026-04-24 22:12	2026-04-23	Show	GitHub Exploit DB Packet Storm

3145	7.0	HIGH Network	openremote	openremote	OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.1, a user who has `write:admin` in one Keycloak realm can call the Manager API to update Keycloak realm roles for users…	CWE-284 Improper Access Control	CVE-2026-41166	2026-04-24 22:10	2026-04-23	Show	GitHub Exploit DB Packet Storm

3146	5.3	MEDIUM Network	pypdf_project	pypdf	pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-ref…	CWE-834 Excessive Iteration	CVE-2026-41168	2026-04-24 22:07	2026-04-23	Show	GitHub Exploit DB Packet Storm

3147	5.9	MEDIUM Network	leancrypto	leancrypto	The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to ui…	CWE-681 Incorrect Conversion between Numeric Types	CVE-2026-34610	2026-04-24 22:01	2026-04-3	Show	GitHub Exploit DB Packet Storm

3148	7.5	HIGH Network	saitoha	libsixel	libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-14072	2026-04-24 21:56	2018-07-16	Show	GitHub Exploit DB Packet Storm

3149	7.5	HIGH Network	saitoha	libsixel	libsixel 1.8.1 tiene una fuga de memoria en sixel_decoder_decode en decoder.c e image_buffer_resize en fromsixel.c y sixel_decode_raw en fromsixel.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-14072	2026-04-24 21:56	2018-07-16	Show	GitHub Exploit DB Packet Storm

3150	7.5	HIGH Network	saitoha	libsixel	libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-14073	2026-04-24 21:56	2018-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed