Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256581 4.3 警告 オラクル - Oracle Application Server の J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0070 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
256582 5 警告 オラクル - Oracle Application Server の J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0067 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
256583 5 警告 オラクル - Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0066 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
256584 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-1385 2010-02-15 11:03 2009-06-4 Show GitHub Exploit DB Packet Storm
256585 4.6 警告 サイバートラスト株式会社
Todd C. Miller
- sudo の Perl スクリプト実行時における権限昇格の脆弱性 - CVE-2005-4158 2010-02-15 11:03 2005-11-8 Show GitHub Exploit DB Packet Storm
256586 1 注意 オラクル - Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3412 2010-02-12 12:22 2010-01-12 Show GitHub Exploit DB Packet Storm
256587 3.2 注意 オラクル - Oracle Database の Oracle Spatial コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3413 2010-02-12 12:22 2010-01-12 Show GitHub Exploit DB Packet Storm
256588 3.6 注意 オラクル - Oracle Database の RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3410 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256589 4 警告 オラクル - Oracle Database の Logical Standby コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-1996 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256590 4.9 警告 オラクル - Oracle Database の Oracle Spatial コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3414 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3861 6.7 MEDIUM
Local
mediatek mt8115_firmware
mt8186_firmware
mt8188_firmware
mt8196_firmware
mt8365_firmware
mt8367_firmware
mt8370_firmware
mt8371_firmware
mt8390_firmware
mt8391_firmware
mt8395_fi…
In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti… CWE-843
Type Confusion
CVE-2026-20451 2026-05-7 21:42 2026-05-4 Show GitHub Exploit DB Packet Storm
3862 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() The xfstests case "generic/107" and syzbot have both … CWE-416
 Use After Free
CVE-2026-31715 2026-05-7 15:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3863 8.8 HIGH
Network
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL poin… NVD-CWE-noinfo
CVE-2026-31709 2026-05-7 15:16 2026-05-1 Show GitHub Exploit DB Packet Storm
3864 7.1 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() sqe->len is __u32 but gets stored into sr->len which is int. When … CWE-125
Out-of-bounds Read
CVE-2026-31774 2026-05-7 11:29 2026-05-2 Show GitHub Exploit DB Packet Storm
3865 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi driver changed the assignment of atc->da… NVD-CWE-noinfo
CVE-2026-31775 2026-05-7 11:28 2026-05-2 Show GitHub Exploit DB Packet Storm
3866 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled in daio_device_index() for hw20k2, and it… CWE-129
 Improper Validation of Array Index
CVE-2026-31776 2026-05-7 11:27 2026-05-2 Show GitHub Exploit DB Packet Storm
3867 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index mapping The ctxfi driver blindly assumed a proper value returned from daio_device_index(),… NVD-CWE-noinfo
CVE-2026-31777 2026-05-7 11:27 2026-05-2 Show GitHub Exploit DB Packet Storm
3868 9.1 CRITICAL
Network
miyagawa plack\ Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the c… CWE-200
CWE-441
CWE-913
Information Exposure
Confused Deputy
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-7381 2026-05-7 11:10 2026-04-30 Show GitHub Exploit DB Packet Storm
3869 5.4 MEDIUM
Network
google chrome Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via malicious network traffic. (Chromium security severity: Mediu… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-7950 2026-05-7 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
3870 7.4 HIGH
Network
gnu
redhat
gnutls
hardened_images
openshift_container_platform
enterprise_linux
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constrai… CWE-178
 Improper Handling of Case Sensitivity
CVE-2026-3833 2026-05-7 11:09 2026-05-1 Show GitHub Exploit DB Packet Storm