Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226911	7.8	危険	ウインドリバー株式会社	-	Wind River VxWorks の FTP デーモンにおけるアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2968	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

226912	7.8	危険	ウインドリバー株式会社	-	Wind River VxWorks の loginLib におけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2010-2967	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

226913	7.8	危険	ウインドリバー株式会社	-	Wind River VxWorks の INCLUDE_SECURITY 機能におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-2966	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

226914	10	危険	Rockwell Automation ウインドリバー株式会社	-	Rockwell Automation 1756-ENBT series A で使用されている Wind River VxWorks における任意のメモリ領域を読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2965	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

226915	6.9	警告	simone rota	-	SLiM における権限を取得される脆弱性	CWE-16 環境設定	CVE-2010-2945	2012-12-20 19:29	2010-08-30	Show	GitHub Exploit DB Packet Storm

226916	5	警告	VideoLAN	-	VideoLAN VLC Media Player の TagLib プラグインにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2937	2012-12-20 19:29	2010-08-20	Show	GitHub Exploit DB Packet Storm

226917	5	警告	ZNC	-	ZNC におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2934	2012-12-20 19:29	2010-08-3	Show	GitHub Exploit DB Packet Storm

226918	9.3	危険	topazsystems	-	SigPlus Pro ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2931	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

226919	7.5	危険	solucija	-	sNews の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2926	2012-12-20 19:29	2010-07-30	Show	GitHub Exploit DB Packet Storm

226920	7.5	危険	silvercover	-	WordPress 用の myLinksDump プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2924	2012-12-20 19:29	2010-07-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224471	6.1	MEDIUM Network	hexo-admin_project	hexo-admin	The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.	CWE-79 Cross-site Scripting	CVE-2019-17606	2024-11-21 13:32	2019-10-24	Show	GitHub Exploit DB Packet Storm

224472	4.3	MEDIUM Network	qt debian	qtbase debian_linux	An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-18281	2024-11-21 13:32	2019-10-24	Show	GitHub Exploit DB Packet Storm

224473	8.8	HIGH Network	online_grading_system_project	online_grading_system	Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into exe…	CWE-352 Origin Validation Error	CVE-2019-18280	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224474	7.8	HIGH Local	videolan	vlc_media_player	When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. NOTE: the …	NVD-CWE-noinfo	CVE-2019-18278	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224475	8.8	HIGH Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via s…	CWE-352 Origin Validation Error	CVE-2019-18220	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224476	7.5	HIGH Network	haproxy	haproxy	A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if co…	CWE-444 HTTP Request Smuggling	CVE-2019-18277	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224477	6.1	MEDIUM Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection with…	CWE-79 Cross-site Scripting	CVE-2019-18219	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224478	7.8	HIGH Local	nipper-ng_project	nipper-ng	A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Ex…	CWE-787 Out-of-bounds Write	CVE-2019-17424	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

224479	7.5	HIGH Network	universal_office_converter_project	universal_office_converter	The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-17400	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

224480	8.1	HIGH Network	libssh2 fedoraproject opensuse debian netapp	libssh2 fedora leap debian_linux element_software ontap_select_deploy_administration_utility solidfire hci_management_node active_iq_unified_manager bootstrap_os	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s…	CWE-190 Integer Overflow or Wraparound	CVE-2019-17498	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed