Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259031	9.3	危険	Mozilla Foundation	-	Mozilla Firefox の Web Open Fonts Format デコーダにおける整数オーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-1028	2010-04-2 14:05	2010-03-19	Show	GitHub Exploit DB Packet Storm

259032	5	警告	富士通アクセラテクノロジ	-	Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性	CWE-200 情報漏えい	-	2010-04-2 14:05	2010-03-10	Show	GitHub Exploit DB Packet Storm

259033	1.9	注意	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3556	2010-04-2 14:02	2010-01-19	Show	GitHub Exploit DB Packet Storm

259034	10	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-4538	2010-04-2 14:02	2010-01-12	Show	GitHub Exploit DB Packet Storm

259035	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3939	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

259036	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3889	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

259037	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の hfs サブシステムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4020	2010-04-2 13:59	2009-12-4	Show	GitHub Exploit DB Packet Storm

259038	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の drivers/firewire/ohci.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4138	2010-04-2 13:58	2009-12-16	Show	GitHub Exploit DB Packet Storm

259039	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の fuse_direct_io 関数におけるサービス運用妨害 (DoS)の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4021	2010-04-2 13:58	2009-11-25	Show	GitHub Exploit DB Packet Storm

259040	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の arch/x86/ia32/ia32entry.S におけるレジスタ値を読み取られる脆弱性	CWE-200 情報漏えい	CVE-2009-2910	2010-04-2 13:56	2009-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
4591	6.3	MEDIUM Network	-	-	A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can …	CWE-266 CWE-284 Incorrect Privilege Assignment Improper Access Control	CVE-2026-9581	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4592	7.5	HIGH Network	archive\	\	Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header. _read_tar() reads each entry's payload with $handle->read($$data, $block), …	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-9538	2026-05-28 23:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

4593	7.5	HIGH Network	-	-	The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.	CWE-524 Use of Cache Containing Sensitive Information	CVE-2026-48901	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4594	7.8	HIGH Local	-	-	A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker ca…	CWE-787 Out-of-bounds Write	CVE-2026-48864	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4595	7.7	HIGH Network	-	-	Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking the IP blacklist, …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45715	2026-05-28 23:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

4596	10.0	CRITICAL Network	-	-	Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds to 0.0.0.0:6664 by de…	CWE-15 CWE-78 CWE-306 External Control of System or Configuration Setting OS Command Missing Authentication for Critical Function	CVE-2026-45087	2026-05-28 23:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

4597	5.0	MEDIUM Network	-	-	Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash strings in four separate …	CWE-78 CWE-1336 OS Command Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-44723	2026-05-28 23:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

4598	7.9	HIGH Local	-	-	pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption…	CWE-59 CWE-287 Link Following Improper Authentication	CVE-2026-44711	2026-05-28 23:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

4599	7.5	HIGH Network	archive\	\	Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory. _make_special_file() passes the tar header's linkname to link() without va…	CWE-59 CWE-732 Link Following Incorrect Permission Assignment for Critical Resource	CVE-2026-42497	2026-05-28 23:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

4600	9.1	CRITICAL Network	archive\	\	Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() with…	CWE-59 Link Following	CVE-2026-42496	2026-05-28 23:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed