Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227411	7.5	危険	silcnet	-	SILC Toolkit などの lib/silcclient/command.c におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2009-3163	2012-12-20 19:28	2009-09-10	Show	GitHub Exploit DB Packet Storm

227412	4.3	警告	x10media	-	x10 MP3 Search engine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3153	2012-12-20 19:28	2009-09-10	Show	GitHub Exploit DB Packet Storm

227413	5	警告	ultrize	-	Ultrize TimeSheet の actions/downloadFile.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3151	2012-12-20 19:28	2009-09-10	Show	GitHub Exploit DB Packet Storm

227414	7.5	危険	portalxp	-	PortalXP Teacher Edition における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3148	2012-12-20 19:28	2009-09-10	Show	GitHub Exploit DB Packet Storm

227415	5	警告	visavi	-	Wap-Motor の gallery/gallery.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3123	2012-12-20 19:28	2009-09-9	Show	GitHub Exploit DB Packet Storm

227416	7.5	危険	x-iweb.ru	-	PHP-Fusion 用の dsmsf モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3119	2012-12-20 19:28	2009-09-9	Show	GitHub Exploit DB Packet Storm

227417	7.5	危険	snowhall	-	Snow Hall Silurus System の category.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3117	2012-12-20 19:28	2009-09-9	Show	GitHub Exploit DB Packet Storm

227418	7.5	危険	Uiga	-	Uiga Church Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3116	2012-12-20 19:28	2009-09-9	Show	GitHub Exploit DB Packet Storm

227419	5	警告	SolarWinds	-	SolarWinds TFTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-3115	2012-12-20 19:28	2009-09-9	Show	GitHub Exploit DB Packet Storm

227420	5.8	警告	シマンテック	-	Symantec Altiris Deployment Solution のファイル転送機能における重要なファイルを読み取られる脆弱性	CWE-362 競合状態	CVE-2009-3110	2012-12-20 19:28	2009-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221701	6.5	MEDIUM Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-20012	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221702	8.8	HIGH Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.	CWE-125 Out-of-bounds Read	CVE-2019-20011	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221703	8.8	HIGH Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c.	CWE-416 Use After Free	CVE-2019-20010	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221704	6.5	MEDIUM Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-20009	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221705	5.4	MEDIUM Network	archerysec	archery	In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.	CWE-79 Cross-site Scripting	CVE-2019-20008	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221706	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer …	CWE-476 NULL Pointer Dereference	CVE-2019-20007	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221707	7.5	HIGH Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), lea…	CWE-416 Use After Free	CVE-2019-20006	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221708	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while r…	CWE-125 Out-of-bounds Read	CVE-2019-20005	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221709	5.9	MEDIUM Network	bullguard	premium_protection	The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted.	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-20000	2024-11-21 13:37	2019-12-26	Show	GitHub Exploit DB Packet Storm

221710	5.3	MEDIUM Network	cisco	firepower_management_center firepower_threat_defense firepower_services_software_for_asa	A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could all…	CWE-276 Incorrect Default Permissions	CVE-2019-1982	2024-11-21 13:37	2019-11-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed