Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254821	6	警告	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Tcl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1170	2010-12-15 12:35	2010-05-17	Show	GitHub Exploit DB Packet Storm

254822	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1169	2010-12-15 12:31	2010-05-17	Show	GitHub Exploit DB Packet Storm

254823	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3753	2010-12-14 14:24	2010-09-27	Show	GitHub Exploit DB Packet Storm

254824	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3752	2010-12-14 14:22	2010-09-27	Show	GitHub Exploit DB Packet Storm

254825	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3308	2010-12-14 14:20	2010-09-27	Show	GitHub Exploit DB Packet Storm

254826	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3302	2010-12-14 14:15	2010-09-27	Show	GitHub Exploit DB Packet Storm

254827	4.3	警告	freedesktop.org レッドハット	-	Poppler の PDF パーサ内にある poppler/Function.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3703	2010-12-13 16:04	2010-11-5	Show	GitHub Exploit DB Packet Storm

254828	8.3	危険	Linux レッドハット	-	Linux kernel の sctp_auth_asoc_get_hmac 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3705	2010-12-13 15:57	2010-10-20	Show	GitHub Exploit DB Packet Storm

254829	6.6	警告	Linux レッドハット	-	Linux kernel の pkt_find_dev_from_minor 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-3437	2010-12-13 15:41	2010-10-4	Show	GitHub Exploit DB Packet Storm

254830	7.2	危険	Linux レッドハット	-	x86_64 プラットフォーム上で稼動する Linux kernel の IA32 システムコールエミュレーション機能における権限昇格の脆弱性	CWE-DesignError	CVE-2010-3301	2010-12-13 15:29	2010-09-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
308061	7.5	HIGH Network	-	-	A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication header containing spec…	CWE-863 Incorrect Authorization	CVE-2024-10295	2024-11-13 06:15	2024-10-25	Show	GitHub Exploit DB Packet Storm

308062	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed If mgmt_index_removed is called while there are commands queued on cmd_…	NVD-CWE-noinfo	CVE-2024-49951	2024-11-13 06:06	2024-10-22	Show	GitHub Exploit DB Packet Storm

308063	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be more gentle about silly gso r…	CWE-476 NULL Pointer Dereference	CVE-2024-49949	2024-11-13 06:03	2024-10-22	Show	GitHub Exploit DB Packet Storm

308064	9.8	CRITICAL Network	eyecix	jobsearch_wp_job_board	Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4.	CWE-862 Missing Authorization	CVE-2024-43929	2024-11-13 05:49	2024-11-2	Show	GitHub Exploit DB Packet Storm

308065	8.8	HIGH Network	eyecix	jobsearch_wp_job_board	Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4.	CWE-862 Missing Authorization	CVE-2024-43928	2024-11-13 05:49	2024-11-2	Show	GitHub Exploit DB Packet Storm

308066	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases mad_agent_priv lo…	NVD-CWE-noinfo	CVE-2024-50095	2024-11-13 05:26	2024-11-6	Show	GitHub Exploit DB Packet Storm

308067	7.5	HIGH Network	dena	h2o	h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top of TCP Fast Open or QUIC 0-RTT packets is received and the IP-address-based ac…	CWE-290 Authentication Bypass by Spoofing	CVE-2024-45397	2024-11-13 05:14	2024-10-12	Show	GitHub Exploit DB Packet Storm

308068	7.5	HIGH Network	dena	quicly	Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure tha…	CWE-617 Reachable Assertion	CVE-2024-45396	2024-11-13 05:05	2024-10-12	Show	GitHub Exploit DB Packet Storm

308069	4.3	MEDIUM Network	dena	h2o	h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows users to modify the response headers being sent by h2o. The con…	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2024-25622	2024-11-13 05:04	2024-10-12	Show	GitHub Exploit DB Packet Storm

308070	9.8	CRITICAL Network	dena	picotls	Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, picotls (specifically, bindings within pico…	CWE-415 Double Free	CVE-2024-45402	2024-11-13 05:02	2024-10-12	Show	GitHub Exploit DB Packet Storm