Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228851	6.8	警告	wonko	-	NotFTP の config.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1407	2012-12-20 19:10	2009-04-24	Show	GitHub Exploit DB Packet Storm

228852	6.8	警告	sweetphp	-	TotalCalendar の cms_detect.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1406	2012-12-20 19:10	2009-04-24	Show	GitHub Exploit DB Packet Storm

228853	10	危険	forkosh	-	mathTex の mathtex.cgi における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2009-1383	2012-12-20 19:10	2009-07-14	Show	GitHub Exploit DB Packet Storm

228854	4.3	警告	レッドハット	-	Red Hat JBoss Enterprise Application Platform の JBossAs におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1380	2012-12-20 19:10	2009-12-9	Show	GitHub Exploit DB Packet Storm

228855	9.3	危険	xilisoft	-	Xilisoft Video Converter の ape_plugin.plg におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1370	2012-12-20 19:10	2009-04-22	Show	GitHub Exploit DB Packet Storm

228856	4.9	警告	サン・マイクロシステムズ	-	Sun OpenSolaris の SCTP におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-1359	2012-12-20 19:10	2009-04-19	Show	GitHub Exploit DB Packet Storm

228857	6.8	警告	サン・マイクロシステムズ	-	Sun Java System Delegated Administrator の da/DA/Login における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2009-1357	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

228858	4	警告	sergey lyubka	-	Mongoose におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1354	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

228859	5	警告	sebastian fernandez	-	Zervit Webserver の libz/misc.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1353	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

228860	4.3	警告	レッドハット	-	C2Net Stronghold におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1349	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225411	8.8	HIGH Network	proofpoint	enterprise_protection	A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 and 8.14.2 respectively, allows attackers to bypass protectio…	NVD-CWE-Other	CVE-2019-19680	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225412	7.5	HIGH Network	schedmd opensuse debian	slurm leap debian_linux	SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.	CWE-269 Improper Privilege Management	CVE-2019-19728	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225413	5.5	MEDIUM Local	schedmd opensuse	slurm leap	SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19727	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225414	5.9	MEDIUM Network	mitel	sip-dect_firmware	An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A successful exploit may allow the attacker to intercept s…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-19891	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225415	5.5	MEDIUM Local	gonitro	nitropdf	The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content.	CWE-476 NULL Pointer Dereference	CVE-2019-19819	2024-11-21 13:35	2020-01-11	Show	GitHub Exploit DB Packet Storm

225416	5.5	MEDIUM Local	gonitro	nitro_free_pdf_reader	The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content.	CWE-125 Out-of-bounds Read	CVE-2019-19817	2024-11-21 13:35	2020-01-11	Show	GitHub Exploit DB Packet Storm

225417	7.8	HIGH Local	kyrol	internet_security	An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution…	CWE-763 Release of Invalid Pointer or Reference	CVE-2019-19820	2024-11-21 13:35	2020-01-11	Show	GitHub Exploit DB Packet Storm

225418	7.5	HIGH Network	python debian fedoraproject canonical	pillow debian_linux fedora ubuntu_linux	There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit …	CWE-190 Integer Overflow or Wraparound	CVE-2019-19911	2024-11-21 13:35	2020-01-6	Show	GitHub Exploit DB Packet Storm

225419	7.5	HIGH Network	gitlab	gitlab	In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch int…	NVD-CWE-noinfo	CVE-2019-19629	2024-11-21 13:35	2020-01-6	Show	GitHub Exploit DB Packet Storm

225420	9.8	CRITICAL Network	gitlab	gitlab	In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities u…	CWE-22 Path Traversal	CVE-2019-19628	2024-11-21 13:35	2020-01-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed