Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227111 4.3 警告 tomaz-muraus - Tomaz Muraus Open Blog の application/modules/admin/controllers/users.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3026 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
227112 4.3 警告 tomaz-muraus - Tomaz Muraus Open Blog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3025 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
227113 7.5 危険 Pligg - Pligg の groupadmin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3013 2012-12-20 19:29 2010-08-11 Show GitHub Exploit DB Packet Storm
227114 10 危険 Wireshark - Wireshark の ASN.1 BER 解析子におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2994 2012-12-20 19:29 2010-08-13 Show GitHub Exploit DB Packet Storm
227115 5 警告 Wireshark - Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2993 2012-12-20 19:29 2010-08-13 Show GitHub Exploit DB Packet Storm
227116 7.5 危険 rightinpoint - RightInPoint Lyrics Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2721 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
227117 7.5 危険 rich kavanagh - PsNews における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2716 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
227118 4.3 警告 tcwonline - TCW PHP Album の photos/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2715 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
227119 7.5 危険 tcwonline - TCW PHP Album の photos/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2714 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
227120 3.5 注意 sijio - Sijio Community Software におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2698 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221621 5.3 MEDIUM
Network 		bromite bromite In Bromite through 78.0.3904.130, there are adblock rules in the release APK; therefore, probing which resources are blocked and which aren't can identify the application version and defeat the User-… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-25056 2024-11-21 13:39 2022-01-26 Show GitHub Exploit DB Packet Storm
221622 7.5 HIGH
Network 		libpulse-binding_project libpulse-binding An issue was discovered in the libpulse-binding crate before 2.6.0 for Rust. It mishandles a panic that crosses a Foreign Function Interface (FFI) boundary. NVD-CWE-noinfo
CVE-2019-25055 2024-11-21 13:39 2021-12-27 Show GitHub Exploit DB Packet Storm
221623 7.5 HIGH
Network 		pnet_project pnet An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault (upon attempted dereference of an uninitialized descriptor) because of an erroneous IcmpTransportChanne… CWE-909
 Missing Initialization of Resource 		CVE-2019-25054 2024-11-21 13:39 2021-12-27 Show GitHub Exploit DB Packet Storm
221624 9.1 CRITICAL
Network 		linaro op-tee In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2019-25052 2024-11-21 13:39 2021-08-12 Show GitHub Exploit DB Packet Storm
221625 7.8 HIGH
Local 		gnu
debian
fedoraproject 		aspell
debian_linux
fedora 		objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list). CWE-787
 Out-of-bounds Write 		CVE-2019-25051 2024-11-21 13:39 2021-07-20 Show GitHub Exploit DB Packet Storm
221626 7.8 HIGH
Local 		osgeo gdal netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and… CWE-787
 Out-of-bounds Write 		CVE-2019-25050 2024-11-21 13:39 2021-07-20 Show GitHub Exploit DB Packet Storm
221627 7.1 HIGH
Local 		openbsd libressl LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx). CWE-125
Out-of-bounds Read 		CVE-2019-25049 2024-11-21 13:39 2021-07-1 Show GitHub Exploit DB Packet Storm
221628 7.1 HIGH
Local 		openbsd libressl LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print). CWE-125
Out-of-bounds Read 		CVE-2019-25048 2024-11-21 13:39 2021-07-1 Show GitHub Exploit DB Packet Storm
221629 6.1 MEDIUM
Network 		greenbone greenbone_security_assistant
greenbone_os 		Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad. CWE-79
Cross-site Scripting 		CVE-2019-25047 2024-11-21 13:39 2021-06-22 Show GitHub Exploit DB Packet Storm
221630 6.1 MEDIUM
Network 		cerberusftp ftp_server The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document. CWE-79
Cross-site Scripting 		CVE-2019-25046 2024-11-21 13:39 2021-06-10 Show GitHub Exploit DB Packet Storm