Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255951	9.3	危険	Mozilla Foundation	-	Mozilla Firefox の Web Open Fonts Format デコーダにおける整数オーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-1028	2010-04-2 14:05	2010-03-19	Show	GitHub Exploit DB Packet Storm

255952	5	警告	富士通アクセラテクノロジ	-	Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性	CWE-200 情報漏えい	-	2010-04-2 14:05	2010-03-10	Show	GitHub Exploit DB Packet Storm

255953	1.9	注意	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3556	2010-04-2 14:02	2010-01-19	Show	GitHub Exploit DB Packet Storm

255954	10	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-4538	2010-04-2 14:02	2010-01-12	Show	GitHub Exploit DB Packet Storm

255955	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3939	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

255956	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3889	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

255957	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の hfs サブシステムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4020	2010-04-2 13:59	2009-12-4	Show	GitHub Exploit DB Packet Storm

255958	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の drivers/firewire/ohci.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4138	2010-04-2 13:58	2009-12-16	Show	GitHub Exploit DB Packet Storm

255959	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の fuse_direct_io 関数におけるサービス運用妨害 (DoS)の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4021	2010-04-2 13:58	2009-11-25	Show	GitHub Exploit DB Packet Storm

255960	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の arch/x86/ia32/ia32entry.S におけるレジスタ値を読み取られる脆弱性	CWE-200 情報漏えい	CVE-2009-2910	2010-04-2 13:56	2009-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4501	8.6	HIGH Network	-	-	A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could ca…	CWE-130 Improper Handling of Length Parameter Inconsistency	CVE-2026-5367	2026-04-30 03:16	2026-04-24	Show	GitHub Exploit DB Packet Storm

4502	6.5	MEDIUM Network	vmware	spring_ai	In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`. Affected versions: Spring AI: 1.0.0 - 1.…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-40980	2026-04-30 03:15	2026-04-28	Show	GitHub Exploit DB Packet Storm

4503	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea + nlen + 1 + vlen as the end of the EA n…	CWE-125 Out-of-bounds Read	CVE-2026-31614	2026-04-30 03:03	2026-04-25	Show	GitHub Exploit DB Packet Storm

4504	8.8	HIGH Network	tenda	f456_firmware	A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Re…	CWE-119 CWE-120 Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow	CVE-2026-7101	2026-04-30 02:42	2026-04-27	Show	GitHub Exploit DB Packet Storm

4505	8.8	HIGH Network	tenda	f456_firmware	A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac results in comm…	CWE-74 CWE-77 Injection Command Injection	CVE-2026-7102	2026-04-30 02:41	2026-04-27	Show	GitHub Exploit DB Packet Storm

4506	5.5	MEDIUM Local	foxit	pdf_editor pdf_reader	Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the program to terminate.	CWE-248 Uncaught Exception	CVE-2026-5937	2026-04-30 02:31	2026-04-27	Show	GitHub Exploit DB Packet Storm

4507	5.5	MEDIUM Local	foxit	pdf_editor pdf_reader	Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.	CWE-691 Insufficient Control Flow Management	CVE-2026-5938	2026-04-30 02:29	2026-04-27	Show	GitHub Exploit DB Packet Storm

4508	5.5	MEDIUM Local	foxit	pdf_editor pdf_reader	A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.	CWE-416 Use After Free	CVE-2026-5939	2026-04-30 02:28	2026-04-27	Show	GitHub Exploit DB Packet Storm

4509	5.5	MEDIUM Local	foxit	pdf_editor pdf_reader	Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.	CWE-416 Use After Free	CVE-2026-5940	2026-04-30 02:26	2026-04-27	Show	GitHub Exploit DB Packet Storm

4510	7.1	HIGH Local	foxit	pdf_editor pdf_reader	Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during inte…	CWE-20 NVD-CWE-noinfo Improper Input Validation	CVE-2026-5941	2026-04-30 02:24	2026-04-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed