Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226411	4.3	警告	SilverStripe	-	SilverStripe におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1593	2012-12-20 19:29	2010-04-28	Show	GitHub Exploit DB Packet Storm

226412	6.9	警告	SiSoftware	-	SiSoftware Sandra の Sandra Device Driver におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1592	2012-12-20 19:29	2010-04-28	Show	GitHub Exploit DB Packet Storm

226413	7.2	危険	Beijing Rising International Software	-	Beijing Rising International Rising Antivirus における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1591	2012-12-20 19:29	2010-04-28	Show	GitHub Exploit DB Packet Storm

226414	4.3	警告	vpasp	-	Rocksalt International VP-ASP Shopping Cart の shopsessionsubs.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1590	2012-12-20 19:29	2010-04-28	Show	GitHub Exploit DB Packet Storm

226415	5	警告	vpasp	-	Rocksalt International VP-ASP Shopping Cart の shopsessionsubs.asp におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1589	2012-12-20 19:29	2010-04-28	Show	GitHub Exploit DB Packet Storm

226416	7.5	危険	vpasp	-	Rocksalt International VP-ASP Shopping Cart の shopsessionsubs.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1588	2012-12-20 19:29	2010-04-28	Show	GitHub Exploit DB Packet Storm

226417	2.1	注意	Steven Jones	-	Drupal 用の Context モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1584	2012-12-20 19:29	2010-05-10	Show	GitHub Exploit DB Packet Storm

226418	7.5	危険	tirzen taskfreak	-	TaskFreak! で使用されている Tirzen Framework の tzn_mysql.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1583	2012-12-20 19:29	2010-05-6	Show	GitHub Exploit DB Packet Storm

226419	7.5	危険	redcomponent	-	Joomla! 用の redSHOP コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1531	2012-12-20 19:29	2010-04-26	Show	GitHub Exploit DB Packet Storm

226420	2.1	注意	reyero	-	Drupal 用の Internationalization モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1530	2012-12-20 19:29	2010-04-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223121	5.3	MEDIUM Network	misp	misp	In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.	NVD-CWE-noinfo	CVE-2019-19379	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

223122	6.5	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of ser…	CWE-20 CWE-476 Improper Input Validation NULL Pointer Dereference	CVE-2019-19376	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

223123	5.3	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versio…	CWE-352 Origin Validation Error	CVE-2019-19375	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

223124	7.5	HIGH Network	rconfig	rconfig	A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later r…	CWE-22 Path Traversal	CVE-2019-19372	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

223125	6.5	MEDIUM Local	linux redhat opensuse	linux_kernel enterprise_linux leap	In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/x…	CWE-787 CWE-416 Out-of-bounds Write Use After Free	CVE-2019-19319	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

223126	4.4	MEDIUM Local	linux opensuse canonical debian netapp	linux_kernel leap ubuntu_linux debian_linux steelstore_cloud_integrated_storage active_iq_unified_manager data_availability_services solidfire hci_management_node aff_a700s…	In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags…	CWE-416 Use After Free	CVE-2019-19318	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

223127	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.	CWE-79 Cross-site Scripting	CVE-2019-19367	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

223128	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.	CWE-79 Cross-site Scripting	CVE-2019-19366	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

223129	5.9	MEDIUM Network	sqlite canonical redhat oracle siemens	sqlite ubuntu_linux enterprise_linux mysql_workbench sinec_infrastructure_network_services	SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.	CWE-476 NULL Pointer Dereference	CVE-2019-19242	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

223130	9.8	CRITICAL Network	haproxy canonical debian	haproxy ubuntu_linux debian_linux	The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Inte…	CWE-74 Injection	CVE-2019-19330	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed