Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226971	7.5	危険	Tiki Software Community Association	-	TikiWiki CMS/Groupware の user_logout 関数におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-1135	2012-12-20 19:29	2010-03-5	Show	GitHub Exploit DB Packet Storm

226972	7.5	危険	Tiki Software Community Association	-	TikiWiki CMS/Groupware の searchlib.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1134	2012-12-20 19:29	2010-03-5	Show	GitHub Exploit DB Packet Storm

226973	7.5	危険	Tiki Software Community Association	-	TikiWiki CMS/Groupware における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1133	2012-12-20 19:29	2010-03-5	Show	GitHub Exploit DB Packet Storm

226974	4.3	警告	tristan barczyk	-	KloNews の cat.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1112	2012-12-20 19:29	2010-03-25	Show	GitHub Exploit DB Packet Storm

226975	7.5	危険	ScriptsFeed.com	-	ScriptsFeed Dating Software の searchmatch.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1096	2012-12-20 19:29	2010-03-24	Show	GitHub Exploit DB Packet Storm

226976	7.5	危険	ScriptsFeed.com	-	ScriptsFeed Business Directory Software の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1092	2012-12-20 19:29	2010-03-24	Show	GitHub Exploit DB Packet Storm

226977	4.3	警告	tornadostore	-	TornadoStore におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1328	2012-12-20 19:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

226978	7.5	危険	tornadostore	-	TornadoStore における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1327	2012-12-20 19:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

226979	10	危険	リアルネットワークス	-	RealNetworks Helix Server などで使用されている AgentX++ における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1319	2012-12-20 19:29	2010-04-20	Show	GitHub Exploit DB Packet Storm

226980	10	危険	リアルネットワークス	-	RealNetworks Helix Server などで使用されている AgentX++ におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1318	2012-12-20 19:29	2010-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221981	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur.	CWE-400 CWE-835 Uncontrolled Resource Consumption Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-20201	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221982	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the …	CWE-125 Out-of-bounds Read	CVE-2019-20200	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221983	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while runnin…	CWE-125 CWE-476 Out-of-bounds Read NULL Pointer Dereference	CVE-2019-20199	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221984	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file.	CWE-674 Uncontrolled Recursion	CVE-2019-20198	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221985	8.8	HIGH Network	nagios	nagios_xi	In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account.	CWE-78 OS Command	CVE-2019-20197	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221986	7.5	HIGH Network	pureftpd fedoraproject	pure-ftpd fedora	In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.	CWE-400 Uncontrolled Resource Consumption	CVE-2019-20176	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221987	7.5	HIGH Network	qemu	qemu	An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an …	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2019-20175	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

221988	7.8	HIGH Local	serenityos	serenityos	Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriti…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20172	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

221989	5.5	MEDIUM Local	gpac debian	gpac debian_linux	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.	CWE-763 Release of Invalid Pointer or Reference	CVE-2019-20170	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

221990	5.5	MEDIUM Local	gpac	gpac	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c.	CWE-416 Use After Free	CVE-2019-20169	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed