Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254611	9.3	危険	BlackBerry	-	BlackBerry Enterprise Server の PDF Distiller におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2604	2011-03-31 13:59	2011-01-11	Show	GitHub Exploit DB Packet Storm

254612	6.8	警告	BlackBerry	-	BlackBerry Device Software のブラウザにおける同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3934	2011-03-31 13:57	2010-10-14	Show	GitHub Exploit DB Packet Storm

254613	6	警告	アップルサイバートラスト株式会社 CUPS ターボリナックスオラクルレッドハット	-	Apple Mac OS X 上で稼働する CUPS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0540	2011-03-31 13:55	2010-06-15	Show	GitHub Exploit DB Packet Storm

254614	6.9	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS の cupsFileOpen 関数における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-2431	2011-03-31 13:54	2010-06-17	Show	GitHub Exploit DB Packet Storm

254615	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS のテキストフィルタサブシステムにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0542	2011-03-31 13:53	2010-06-17	Show	GitHub Exploit DB Packet Storm

254616	7.9	危険	アップルサイバートラスト株式会社レッドハットオラクル CUPS	-	CUPS の cupsd 内にある ipp.c における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2941	2011-03-31 13:51	2010-11-11	Show	GitHub Exploit DB Packet Storm

254617	4.3	警告	アップルサイバートラスト株式会社 CUPS ターボリナックスオラクルレッドハット	-	Apple Mac OS X 上で稼働する CUPS における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2010-1748	2011-03-31 13:45	2010-06-15	Show	GitHub Exploit DB Packet Storm

254618	6.9	警告	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における権限昇格の脆弱性	CWE-Other その他	CVE-2011-0575	2011-03-31 13:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

254619	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0130	2011-03-30 15:55	2011-03-3	Show	GitHub Exploit DB Packet Storm

254620	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0129	2011-03-30 15:53	2011-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
5761	6.1	MEDIUM Local	vmware	spring_ai	In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)	CWE-377 Insecure Temporary File	CVE-2026-40979	2026-04-30 03:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

5762	5.3	MEDIUM Network	-	-	A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeChat Work Platform Ad…	CWE-22 Path Traversal	CVE-2026-7396	2026-04-30 03:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

5763	4.7	MEDIUM Network	-	-	A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the component GET Parame…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-7394	2026-04-30 03:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

5764	8.6	HIGH Network	-	-	A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could ca…	CWE-130 Improper Handling of Length Parameter Inconsistency	CVE-2026-5367	2026-04-30 03:16	2026-04-24	Show	GitHub Exploit DB Packet Storm

5765	6.5	MEDIUM Network	vmware	spring_ai	In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`. Affected versions: Spring AI: 1.0.0 - 1.…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40980	2026-04-30 03:15	2026-04-28	Show	GitHub Exploit DB Packet Storm

5766	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea + nlen + 1 + vlen as the end of the EA n…	CWE-125 Out-of-bounds Read	CVE-2026-31614	2026-04-30 03:03	2026-04-25	Show	GitHub Exploit DB Packet Storm

5767	8.8	HIGH Network	tenda	f456_firmware	A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Re…	CWE-119 CWE-120 Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow	CVE-2026-7101	2026-04-30 02:42	2026-04-27	Show	GitHub Exploit DB Packet Storm

5768	8.8	HIGH Network	tenda	f456_firmware	A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac results in comm…	CWE-74 CWE-77 Injection Command Injection	CVE-2026-7102	2026-04-30 02:41	2026-04-27	Show	GitHub Exploit DB Packet Storm

5769	5.5	MEDIUM Local	foxit	pdf_editor pdf_reader	Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the program to terminate.	CWE-248 Uncaught Exception	CVE-2026-5937	2026-04-30 02:31	2026-04-27	Show	GitHub Exploit DB Packet Storm

5770	5.5	MEDIUM Local	foxit	pdf_editor pdf_reader	Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.	CWE-691 Insufficient Control Flow Management	CVE-2026-5938	2026-04-30 02:29	2026-04-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed