Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255911	6.4	警告	アップル	-	Apple Mac OS X の ClamAV におけるシステムにウィルスを取り込む脆弱性	CWE-16 環境設定	CVE-2010-0058	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

255912	7.5	危険	アップル	-	Apple Mac OS X の AFP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0533	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

255913	7.5	危険	アップル	-	Apple Mac OS X の AFP サーバにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0057	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

255914	6.4	警告	アップル	-	Apple Mac OS X のアプリケーションファイアウォールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2801	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

255915	6.8	警告	アップル	-	Apple Mac OS X の Cocoa のスペルチェック機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0056	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

255916	4.4	警告	アップルサイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAPd にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2632	2010-04-13 14:46	2009-09-10	Show	GitHub Exploit DB Packet Storm

255917	7.5	危険	Haxx アップルサイバートラスト株式会社レッドハット	-	cURL および libcurl における、任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2417	2010-04-13 14:46	2009-08-12	Show	GitHub Exploit DB Packet Storm

255918	6.8	警告	Haxx アップルサイバートラスト株式会社レッドハット	-	curl および libcurl の redirect 実装における任意のコマンドを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-0037	2010-04-13 14:45	2009-03-3	Show	GitHub Exploit DB Packet Storm

255919	9.3	危険	ジャストシステム	-	一太郎シリーズにおける任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1424	2010-04-12 15:32	2010-04-12	Show	GitHub Exploit DB Packet Storm

255920	4.4	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1030	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1261	9.9	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, NodeVM's builtin allowlist can be bypassed when the module builtin is allowed (including via the '*' wildcard). The module builtin expos…	CWE-863 Incorrect Authorization	CVE-2026-43999	2026-05-15 01:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

1262	5.6	MEDIUM Local	-	-	NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buffer overflow via the mod_para parameter in the woal_init_module_param function.	CWE-120 Classic Buffer Overflow	CVE-2025-29338	2026-05-15 01:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

1263	7.3	HIGH Network	-	-	Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task_mavobc_entry function at /comm/task_comm.c.	CWE-120 Classic Buffer Overflow	CVE-2024-55045	2026-05-15 01:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

1264	6.1	MEDIUM Network	-	-	A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated S…	-	CVE-2026-8496	2026-05-15 01:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

1265	-		-	-	Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the cli…	CWE-266 Incorrect Privilege Assignment	CVE-2025-68420	2026-05-15 01:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

1266	-		-	-	Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the database with elev…	CWE-798 Use of Hard-coded Credentials	CVE-2025-68421	2026-05-15 01:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

1267	-		-	-	WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint. An attacker can send a specially crafted URL that, when opened by an authenticated user, results i…	CWE-79 Cross-site Scripting	CVE-2026-1630	2026-05-15 01:07	2026-05-14	Show	GitHub Exploit DB Packet Storm

1268	-		-	-	Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login logging mechanism. When an unauthenticated remote attacker attempts to log in using an incorrect username and p…	CWE-79 Cross-site Scripting	CVE-2026-21730	2026-05-15 01:04	2026-05-15	Show	GitHub Exploit DB Packet Storm

1269	7.8	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.	CWE-190 Integer Overflow or Wraparound	CVE-2026-35415	2026-05-15 00:57	2026-05-13	Show	GitHub Exploit DB Packet Storm

1270	7.0	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.	CWE-416 Use After Free	CVE-2026-35416	2026-05-15 00:55	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed