Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259361	10	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0361	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

259362	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープ領域のメモリ格納場所を上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-0360	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

259363	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0273	2010-02-23 11:58	2010-01-8	Show	GitHub Exploit DB Packet Storm

259364	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0272	2010-02-23 11:57	2010-01-8	Show	GitHub Exploit DB Packet Storm

259365	7.5	危険	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の Java Web Start 実装における署名された JAR ファイルと JNLP アプリケーション処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3886	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259366	5	警告	アップル VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の TimeZone.getTimeZone メソッドにおけるローカルファイルの存在を知られる脆弱性	CWE-Other その他	CVE-2009-3884	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259367	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Windows Pluggable Look and Feel (PL&F) における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3883	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

259368	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Swing 実装における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3882	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259369	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK における権限を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3881	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

259370	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Abstract Window Toolkit (AWT) における情報漏えいの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3880	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314341	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be more gentle about silly gso r…	CWE-476 NULL Pointer Dereference	CVE-2024-49949	2024-11-13 06:03	2024-10-22	Show	GitHub Exploit DB Packet Storm

314342	9.8	CRITICAL Network	eyecix	jobsearch_wp_job_board	Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4.	CWE-862 Missing Authorization	CVE-2024-43929	2024-11-13 05:49	2024-11-2	Show	GitHub Exploit DB Packet Storm

314343	8.8	HIGH Network	eyecix	jobsearch_wp_job_board	Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4.	CWE-862 Missing Authorization	CVE-2024-43928	2024-11-13 05:49	2024-11-2	Show	GitHub Exploit DB Packet Storm

314344	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases mad_agent_priv lo…	NVD-CWE-noinfo	CVE-2024-50095	2024-11-13 05:26	2024-11-6	Show	GitHub Exploit DB Packet Storm

314345	7.5	HIGH Network	dena	h2o	h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top of TCP Fast Open or QUIC 0-RTT packets is received and the IP-address-based ac…	CWE-290 Authentication Bypass by Spoofing	CVE-2024-45397	2024-11-13 05:14	2024-10-12	Show	GitHub Exploit DB Packet Storm

314346	7.5	HIGH Network	dena	quicly	Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure tha…	CWE-617 Reachable Assertion	CVE-2024-45396	2024-11-13 05:05	2024-10-12	Show	GitHub Exploit DB Packet Storm

314347	4.3	MEDIUM Network	dena	h2o	h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows users to modify the response headers being sent by h2o. The con…	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2024-25622	2024-11-13 05:04	2024-10-12	Show	GitHub Exploit DB Packet Storm

314348	9.8	CRITICAL Network	dena	picotls	Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, picotls (specifically, bindings within pico…	CWE-415 Double Free	CVE-2024-45402	2024-11-13 05:02	2024-10-12	Show	GitHub Exploit DB Packet Storm

314349	7.5	HIGH Network	dena	h2o	h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When h2o is configured as a reverse proxy and HTTP/3 requests are cancelled by the client, h2o might crash due to an assertion fail…	CWE-617 Reachable Assertion	CVE-2024-45403	2024-11-13 04:59	2024-10-12	Show	GitHub Exploit DB Packet Storm

314350	5.8	MEDIUM Network	plane	plane	Plane is an open-source project management tool. Plane uses the ** wildcard support to retrieve the image from any hostname as in /web/next.config.js. This may permit an attacker to induce the server…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47830	2024-11-13 04:55	2024-10-12	Show	GitHub Exploit DB Packet Storm