Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228001 2.1 注意 レッドハット
VMware
Samba Project		 - Samba の client/mount.cifs.c におけるサービス運用妨害 (mtab 破損) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0547 2012-12-21 16:48 2010-02-4 Show GitHub Exploit DB Packet Storm
228002 9.3 危険 VMware
RPM
レッドハット		 - RPM におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3378 2012-12-21 16:47 2011-12-24 Show GitHub Exploit DB Packet Storm
228003 7.2 危険 サイバートラスト株式会社
VMware
レッドハット		 - Red Hat Package Manager の lib/fsm.c における 権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2059 2012-12-21 16:46 2010-06-8 Show GitHub Exploit DB Packet Storm
228004 7.2 危険 VMware
Linux		 - Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2517 2012-12-21 16:44 2012-05-24 Show GitHub Exploit DB Packet Storm
228005 2.1 注意 VMware
Linux		 - Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2495 2012-12-21 16:43 2012-06-13 Show GitHub Exploit DB Packet Storm
228006 4.9 警告 VMware
Linux
レッドハット		 - Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2689 2012-12-21 16:42 2011-07-21 Show GitHub Exploit DB Packet Storm
228007 7.2 危険 VMware
Linux		 - Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2525 2012-12-21 16:41 2012-02-2 Show GitHub Exploit DB Packet Storm
228008 7.6 危険 アップル
VMware
サン・マイクロシステムズ
ヒューレット・パッカード
レッドハット		 - 複数の Oracle 製品の Java Runtime Environment における脆弱性 CWE-noinfo
情報不足 		CVE-2010-4422 2012-12-21 16:38 2011-02-15 Show GitHub Exploit DB Packet Storm
228009 5.1 警告 サン・マイクロシステムズ
ヒューレット・パッカード
オラクル
VMware
日立
レッドハット		 - 複数の Oracle 製品の Networking コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3574 2012-12-21 16:37 2010-10-12 Show GitHub Exploit DB Packet Storm
228010 5.1 警告 サン・マイクロシステムズ
VMware
ヒューレット・パッカード
レッドハット		 - 複数の Oracle 製品の Networking コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3573 2012-12-21 16:36 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220401 8.8 HIGH
Network 		nagios nagios_xi Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job. CWE-79
Cross-site Scripting 		CVE-2019-9164 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220402 6.1 MEDIUM
Network 		mailtraq webmail Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript… CWE-79
Cross-site Scripting 		CVE-2019-9558 2024-11-21 13:51 2019-03-13 Show GitHub Exploit DB Packet Storm
220403 6.1 MEDIUM
Network 		codecrafters ability_mail_server Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the b… CWE-79
Cross-site Scripting 		CVE-2019-9557 2024-11-21 13:51 2019-03-13 Show GitHub Exploit DB Packet Storm
220404 6.1 MEDIUM
Network 		stackstorm stackstorm In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-9580 2024-11-21 13:51 2019-03-9 Show GitHub Exploit DB Packet Storm
220405 7.0 HIGH
Local 		cyberark endpoint_privilege_manager A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker (without Administrator privileges) to escalate privileges … CWE-787
 Out-of-bounds Write 		CVE-2019-9627 2024-11-21 13:51 2019-03-9 Show GitHub Exploit DB Packet Storm
220406 6.5 MEDIUM
Network 		chshcms cscms An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds. CWE-352
 Origin Validation Error 		CVE-2019-9598 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
220407 8.8 HIGH
Network 		boltcms bolt Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-9185 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
220408 9.8 CRITICAL
Network 		motorola m2_firmware
c1_firmware 		An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root … CWE-78
OS Command  		CVE-2019-9121 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
220409 9.8 CRITICAL
Network 		motorola m2_firmware
c1_firmware 		An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root … CWE-78
OS Command  		CVE-2019-9120 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
220410 9.8 CRITICAL
Network 		motorola m2_firmware
c1_firmware 		An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root … CWE-78
OS Command  		CVE-2019-9119 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm