Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226881	9.3	危険	Viscom Software	-	Viscom Software Movie Player Pro SDK ActiveX の MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0356	2012-12-20 19:28	2010-01-18	Show	GitHub Exploit DB Packet Storm

226882	4.3	警告	TYPO3 Association	-	TYPO3 用の VD / Geomap エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0347	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226883	4.3	警告	TYPO3 Association	-	TYPO3 用の Tip many friends エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0346	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226884	4.3	警告	TYPO3 Association	-	TYPO3 用の Majordomo エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0345	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226885	7.5	危険	TYPO3 Association	-	TYPO3 用の zak_store_management エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0344	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226886	5	警告	トレンドマイクロ	-	OfficeScan および tmufeng.dll の TMUFE におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0564	2012-12-20 19:28	2009-10-9	Show	GitHub Exploit DB Packet Storm

226887	4.3	警告	サン・マイクロシステムズ	-	Sun Java System Application Server のデフォルト設定における認証の資格情報などを盗まれる脆弱性	CWE-16 環境設定	CVE-2010-0386	2012-12-20 19:28	2004-11-3	Show	GitHub Exploit DB Packet Storm

226888	7.5	危険	TYPO3 Association	-	TYPO3 用の Clan Users List エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0343	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226889	7.5	危険	TYPO3 Association	-	TYPO3 用の job_reports エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0342	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

226890	7.5	危険	TYPO3 Association	-	TYPO3 用の BB Simple Jobs エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0341	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224391	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrar…	CWE-787 Out-of-bounds Write	CVE-2019-16735	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224392	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.	CWE-798 Use of Hard-coded Credentials	CVE-2019-16734	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224393	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.	CWE-78 OS Command	CVE-2019-16733	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224394	8.1	HIGH Network	skymee petwant	petalk_ai_firmware pf-103_firmware	Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user.	CWE-347 CWE-319 Improper Verification of Cryptographic Signature Cleartext Transmission of Sensitive Information	CVE-2019-16732	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224395	7.5	HIGH Network	skymee petwant	petalk_ai_firmware pf-103_firmware	The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings.	CWE-306 Missing Authentication for Critical Function	CVE-2019-16731	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224396	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.	CWE-78 OS Command	CVE-2019-16730	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224397	7.5	HIGH Network	egain	mail	The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fromName header injection with a %0a or %0d…	CWE-74 Injection	CVE-2019-17123	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224398	9.8	CRITICAL Network	phpfastcache	phpfastcache	In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.	CWE-502 Deserialization of Untrusted Data	CVE-2019-16774	2024-11-21 13:31	2019-12-13	Show	GitHub Exploit DB Packet Storm

224399	6.5	MEDIUM Network	npmjs opensuse oracle fedoraproject redhat	npm leap graalvm fedora enterprise_linux enterprise_linux_eus	Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For e…	CWE-269 Improper Privilege Management	CVE-2019-16777	2024-11-21 13:31	2019-12-13	Show	GitHub Exploit DB Packet Storm

224400	8.1	HIGH Network	npmjs opensuse oracle fedoraproject redhat	npm leap graalvm fedora enterprise_linux enterprise_linux_eus	Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended node_modules folder through the bin field. A properly …	CWE-22 Path Traversal	CVE-2019-16776	2024-11-21 13:31	2019-12-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed