Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255871	9.3	危険	ジャストシステム	-	一太郎シリーズにおける任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-2152	2010-06-1 16:01	2010-06-1	Show	GitHub Exploit DB Packet Storm

255872	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1289	2010-06-1 15:45	2010-05-11	Show	GitHub Exploit DB Packet Storm

255873	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1288	2010-06-1 15:45	2010-05-11	Show	GitHub Exploit DB Packet Storm

255874	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1287	2010-06-1 15:45	2010-05-11	Show	GitHub Exploit DB Packet Storm

255875	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1286	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

255876	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1284	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

255877	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1283	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

255878	4.3	警告	レッドハット Glyph & Cog, LLC ターボリナックスサイバートラスト株式会社 CUPS	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0166	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

255879	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0147	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

255880	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0146	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3661	6.7	MEDIUM Local	mediatek	mt8115_firmware mt8186_firmware mt8188_firmware mt8196_firmware mt8365_firmware mt8367_firmware mt8370_firmware mt8371_firmware mt8390_firmware mt8391_firmware mt8395_fi…	In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti…	CWE-843 Type Confusion	CVE-2026-20451	2026-05-7 21:42	2026-05-4	Show	GitHub Exploit DB Packet Storm

3662	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() The xfstests case "generic/107" and syzbot have both …	CWE-416 Use After Free	CVE-2026-31715	2026-05-7 15:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

3663	8.8	HIGH Network	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL poin…	NVD-CWE-noinfo	CVE-2026-31709	2026-05-7 15:16	2026-05-1	Show	GitHub Exploit DB Packet Storm

3664	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() sqe->len is __u32 but gets stored into sr->len which is int. When …	CWE-125 Out-of-bounds Read	CVE-2026-31774	2026-05-7 11:29	2026-05-2	Show	GitHub Exploit DB Packet Storm

3665	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi driver changed the assignment of atc->da…	NVD-CWE-noinfo	CVE-2026-31775	2026-05-7 11:28	2026-05-2	Show	GitHub Exploit DB Packet Storm

3666	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled in daio_device_index() for hw20k2, and it…	CWE-129 Improper Validation of Array Index	CVE-2026-31776	2026-05-7 11:27	2026-05-2	Show	GitHub Exploit DB Packet Storm

3667	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index mapping The ctxfi driver blindly assumed a proper value returned from daio_device_index(),…	NVD-CWE-noinfo	CVE-2026-31777	2026-05-7 11:27	2026-05-2	Show	GitHub Exploit DB Packet Storm

3668	9.1	CRITICAL Network	miyagawa	plack\	Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the c…	CWE-200 CWE-441 CWE-913 Information Exposure Confused Deputy Improper Control of Dynamically-Managed Code Resources	CVE-2026-7381	2026-05-7 11:10	2026-04-30	Show	GitHub Exploit DB Packet Storm

3669	5.4	MEDIUM Network	google	chrome	Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via malicious network traffic. (Chromium security severity: Mediu…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2026-7950	2026-05-7 11:09	2026-05-7	Show	GitHub Exploit DB Packet Storm

3670	7.4	HIGH Network	gnu redhat	gnutls hardened_images openshift_container_platform enterprise_linux	A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constrai…	CWE-178 Improper Handling of Case Sensitivity	CVE-2026-3833	2026-05-7 11:09	2026-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed