Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226451	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における Shockwave ランタイムのインストールに関する問題	CWE-Other その他	CVE-2012-6270	2012-12-21 15:48	2012-12-19	Show	GitHub Exploit DB Packet Storm

226452	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の snd_hdspm_hwdep_ioctl 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4081	2012-12-21 15:46	2010-11-30	Show	GitHub Exploit DB Packet Storm

226453	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の snd_hdsp_hwdep_ioctl 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4080	2012-12-21 15:44	2010-11-30	Show	GitHub Exploit DB Packet Storm

226454	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の uart_get_count 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4075	2012-12-21 15:43	2010-11-29	Show	GitHub Exploit DB Packet Storm

226455	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の ipc サブシステムにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4073	2012-12-21 15:42	2010-11-29	Show	GitHub Exploit DB Packet Storm

226456	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の copy_shmid_to_user 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4072	2012-12-21 15:41	2010-11-29	Show	GitHub Exploit DB Packet Storm

226457	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の net/ipv4/inet_diag.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3880	2012-12-21 15:39	2010-12-10	Show	GitHub Exploit DB Packet Storm

226458	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の get_name 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3877	2012-12-21 15:38	2011-01-3	Show	GitHub Exploit DB Packet Storm

226459	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の net/packet/af_packet.c における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3876	2012-12-21 15:36	2011-01-3	Show	GitHub Exploit DB Packet Storm

226460	7.2	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の hci_uart_tty_open 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-3865	2012-12-21 15:35	2011-01-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223641	7.5	HIGH Network	apache oracle	netbeans graalvm	The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and includin…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2019-17561	2024-11-21 13:32	2020-03-31	Show	GitHub Exploit DB Packet Storm

223642	9.1	CRITICAL Network	apache oracle	netbeans graalvm	The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the downlo…	CWE-295 Improper Certificate Validation	CVE-2019-17560	2024-11-21 13:32	2020-03-31	Show	GitHub Exploit DB Packet Storm

223643	5.4	MEDIUM Network	netapp	oncommand_system_manager	OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scr…	CWE-79 Cross-site Scripting	CVE-2019-17276	2024-11-21 13:32	2020-03-25	Show	GitHub Exploit DB Packet Storm

223644	7.5	HIGH Network	moxa	iologik_2512_firmware iologik_2512-t_firmware iologik_2512-hspa_firmware iologik_2512-hspa-t_firmware iologik_2512-wl1-eu_firmware iologik_2512-wl1-eu-t_firmware iologik_2512-wl1-us…	In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to f…	NVD-CWE-noinfo	CVE-2019-18242	2024-11-21 13:32	2020-03-25	Show	GitHub Exploit DB Packet Storm

223645	9.8	CRITICAL Network	apache debian	traffic_server debian_linux	There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and chunked encoding. Upgrade to versions 7.1.9 and 8.0.6 or later version…	CWE-444 HTTP Request Smuggling	CVE-2019-17565	2024-11-21 13:32	2020-03-24	Show	GitHub Exploit DB Packet Storm

223646	9.8	CRITICAL Network	apache debian	traffic_server debian_linux	There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and scheme parsing. Upgrade to versions 7.1.9 and 8.0.6 or later versions.	CWE-444 HTTP Request Smuggling	CVE-2019-17559	2024-11-21 13:32	2020-03-24	Show	GitHub Exploit DB Packet Storm

223647	8.8	HIGH Network	fortinet	fortimanager	An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH)…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-17654	2024-11-21 13:32	2020-03-16	Show	GitHub Exploit DB Packet Storm

223648	8.8	HIGH Network	fortinet	fortisiem	A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated …	CWE-352 Origin Validation Error	CVE-2019-17653	2024-11-21 13:32	2020-03-13	Show	GitHub Exploit DB Packet Storm

223649	9.8	CRITICAL Network	fortinet	forticlient	An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executabl…	CWE-428 Unquoted Search Path or Element	CVE-2019-17658	2024-11-21 13:32	2020-03-13	Show	GitHub Exploit DB Packet Storm

223650	8.1	HIGH Network	eclipse	theia	In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is "Mini-Browser", published as "@theia/mini-browser" on npmjs.com. This extension, for its own needs,…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-17636	2024-11-21 13:32	2020-03-11	Show	GitHub Exploit DB Packet Storm