Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226401	4.3	警告	TYPO3 Association	-	TYPO3 用の Majordomo エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0345	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226402	7.5	危険	TYPO3 Association	-	TYPO3 用の zak_store_management エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0344	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226403	5	警告	トレンドマイクロ	-	OfficeScan および tmufeng.dll の TMUFE におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0564	2012-12-20 19:28	2009-10-9	Show	GitHub Exploit DB Packet Storm

226404	4.3	警告	サン・マイクロシステムズ	-	Sun Java System Application Server のデフォルト設定における認証の資格情報などを盗まれる脆弱性	CWE-16 環境設定	CVE-2010-0386	2012-12-20 19:28	2004-11-3	Show	GitHub Exploit DB Packet Storm

226405	7.5	危険	TYPO3 Association	-	TYPO3 用の Clan Users List エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0343	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226406	7.5	危険	TYPO3 Association	-	TYPO3 用の job_reports エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0342	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226407	7.5	危険	TYPO3 Association	-	TYPO3 用の BB Simple Jobs エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0341	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226408	7.5	危険	TYPO3 Association	-	TYPO3 用の MJS Event Pro エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0340	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226409	7.5	危険	TYPO3 Association	-	TYPO3 用の User Links エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0339	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226410	7.5	危険	TYPO3 Association	-	TYPO3 用の TT_Products エディタエクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0338	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223541	7.0	HIGH Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introdu…	CWE-362 Race Condition	CVE-2019-17342	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223542	7.8	HIGH Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passe…	CWE-362 Race Condition	CVE-2019-17341	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223543	8.8	HIGH Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-17340	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223544	6.5	MEDIUM Local	xen linux	xen linux_kernel	An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-17351	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223545	5.5	MEDIUM Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-17350	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223546	7.2	HIGH Network	sugarcrm	sugarcrm	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user.	CWE-22 Path Traversal	CVE-2019-17314	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223547	8.8	HIGH Network	sugarcrm	sugarcrm	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user.	CWE-22 Path Traversal	CVE-2019-17313	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223548	8.8	HIGH Network	sugarcrm	sugarcrm	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.	CWE-22 Path Traversal	CVE-2019-17312	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223549	8.8	HIGH Network	sugarcrm	sugarcrm	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.	CWE-22 Path Traversal	CVE-2019-17311	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

223550	7.2	HIGH Network	sugarcrm	sugarcrm	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.	CWE-94 Code Injection	CVE-2019-17310	2024-11-21 13:32	2019-10-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed