Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256701	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Swing 実装における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3882	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256702	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK における権限を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3881	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256703	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Abstract Window Toolkit (AWT) における情報漏えいの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3880	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256704	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の X11 および Win32GraphicsDevice サブシステムにおける getConfigurations 関数による配列の複製に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3879	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256705	5	警告	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の TrueType フォント解析機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3729	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256706	5	警告	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の Java Runtime Environment (JRE) におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3728	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

256707	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0248	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

256708	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0244	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

256709	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0027	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

256710	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0247	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4931	6.2	MEDIUM Local	-	-	SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers to cause a denial of service by supplying an oversized string. Attackers can in…	CWE-120 Classic Buffer Overflow	CVE-2018-25313	2026-05-1 00:44	2026-04-30	Show	GitHub Exploit DB Packet Storm

4932	4.3	MEDIUM Network	-	-	Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vu…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-23773	2026-05-1 00:13	2026-04-29	Show	GitHub Exploit DB Packet Storm

4933	-		-	-	Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to tri…	CWE-125 Out-of-bounds Read	CVE-2026-2810	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

4934	6.5	MEDIUM Network	-	-	Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Serv…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-6914	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

4935	6.3	MEDIUM Network	-	-	An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect h…	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-6915	2026-05-1 00:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

4936	4.4	MEDIUM Local	-	-	Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, res…	CWE-124 CWE-191 Buffer Underflow Integer Underflow (Wrap or Wraparound)	CVE-2026-26204	2026-05-1 00:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

4937	6.5	MEDIUM Network	-	-	Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection for POST /security…	CWE-307 CWE-362 CWE-367 mproper Restriction of Excessive Authentication Attempts Race Condition Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-26206	2026-05-1 00:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

4938	6.5	MEDIUM Network	-	-	Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in print_hex_string() i…	CWE-121 CWE-400 Stack-based Buffer Overflow Uncontrolled Resource Consumption	CVE-2026-28221	2026-05-1 00:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

4939	9.0	CRITICAL Network	-	-	Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's cluster synchroniz…	CWE-22 CWE-73 Path Traversal External Control of File Name or Path	CVE-2026-30893	2026-05-1 00:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

4940	6.5	MEDIUM Network	-	-	Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation.…	CWE-200 CWE-359 Information Exposure Exposure of Private Personal Information to an Unauthorized Actor	CVE-2026-7382	2026-05-1 00:09	2026-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed