Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227871 6.8 警告 stafford.uklinux - libESMTP における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2010-1192 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
227872 6.4 警告 sahanafoundation - Sahana 災害管理システムにおけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-1191 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
227873 10 危険 SAP - SAP MaxDB の serv.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1185 2012-12-20 19:29 2010-03-29 Show GitHub Exploit DB Packet Storm
227874 3.3 注意 サン・マイクロシステムズ - Oracle Solaris の特定の patch-installation スクリプトにおける任意のファイルへのデータを追加される脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-1183 2012-12-20 19:29 2010-03-29 Show GitHub Exploit DB Packet Storm
227875 4.3 警告 phpmysite - phpMySite の contact.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1091 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
227876 7.5 危険 phpmysite - phpMySite の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1090 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
227877 7.5 危険 phptroubleticket - PHP Trouble Ticket の vedi_faq.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1089 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
227878 4.3 警告 PulseCMS - Pulse CMS の view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1080 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227879 4.3 警告 Sawmill - Sawmill におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1079 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227880 7.5 危険 sphere.xlentprojects - XlentProjects SphereCMSSpey の archive.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1078 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225531 6.5 MEDIUM
Network 		dlink dir-615_t1_firmware On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal. NVD-CWE-noinfo
CVE-2019-19743 2024-11-21 13:35 2019-12-17 Show GitHub Exploit DB Packet Storm
225532 7.5 HIGH
Network 		roxyfileman roxy_fileman Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This can be leveraged for code execution by u… CWE-22
Path Traversal 		CVE-2019-19731 2024-11-21 13:35 2019-12-17 Show GitHub Exploit DB Packet Storm
225533 6.5 MEDIUM
Network 		cyrus
debian
fedoraproject
canonical 		imap
debian_linux
fedora
ubuntu_linux 		An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uploading is allowed (3.x) or certain non-default sieve options are enabled (2.x), a… CWE-269
 Improper Privilege Management 		CVE-2019-19783 2024-11-21 13:35 2019-12-16 Show GitHub Exploit DB Packet Storm
225534 7.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. Th… CWE-416
 Use After Free 		CVE-2019-19807 2024-11-21 13:35 2019-12-16 Show GitHub Exploit DB Packet Storm
225535 5.5 MEDIUM
Local 		xfig_project
fedoraproject
debian 		fig2dev
fedora
debian_linux 		read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. CWE-787
 Out-of-bounds Write 		CVE-2019-19797 2024-11-21 13:35 2019-12-16 Show GitHub Exploit DB Packet Storm
225536 7.8 HIGH
Local 		yabasic yabasic Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file. CWE-787
 Out-of-bounds Write 		CVE-2019-19796 2024-11-21 13:35 2019-12-14 Show GitHub Exploit DB Packet Storm
225537 7.8 HIGH
Local 		samurai_project samurai samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file. CWE-787
 Out-of-bounds Write 		CVE-2019-19795 2024-11-21 13:35 2019-12-14 Show GitHub Exploit DB Packet Storm
225538 5.9 MEDIUM
Network 		miekg-dns_project miekg-dns The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to res… CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2019-19794 2024-11-21 13:35 2019-12-14 Show GitHub Exploit DB Packet Storm
225539 8.8 HIGH
Network 		cyxtera appgate_sdp In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2019-19793 2024-11-21 13:35 2019-12-14 Show GitHub Exploit DB Packet Storm
225540 9.8 CRITICAL
Network 		telerik radchart
ui_for_asp.net_ajax 		Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server throu… CWE-22
Path Traversal 		CVE-2019-19790 2024-11-21 13:35 2019-12-14 Show GitHub Exploit DB Packet Storm