Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230211	4.4	警告	VMware Linux レッドハット	-	Linux kernel の ib_uverbs_poll_cq 関数における整数オーバーフロー脆弱性	CWE-189 数値処理の問題	CVE-2010-4649	2012-12-19 16:56	2011-01-4	Show	GitHub Exploit DB Packet Storm

230212	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の is_gpt_valid 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1577	2012-12-19 16:56	2011-03-14	Show	GitHub Exploit DB Packet Storm

230213	10	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3559	2012-12-19 16:54	2010-10-12	Show	GitHub Exploit DB Packet Storm

230214	10	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Web Start コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3558	2012-12-19 16:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

230215	6.8	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Swing コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3557	2012-12-19 16:49	2010-10-12	Show	GitHub Exploit DB Packet Storm

230216	5.1	警告	レッドハット	-	OpenShift の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5622	2012-12-19 16:42	2012-12-10	Show	GitHub Exploit DB Packet Storm

230217	6.5	警告	ownCloud	-	ownCloud の lib/filesystem.php における任意の PHP コードを実行される脆弱性	CWE-20 CWE-Other	CVE-2012-5610	2012-12-19 16:32	2012-11-13	Show	GitHub Exploit DB Packet Storm

230218	6.5	警告	ownCloud	-	ownCloud の lib/migrate.php における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2012-5609	2012-12-19 16:21	2012-11-13	Show	GitHub Exploit DB Packet Storm

230219	4.3	警告	ownCloud	-	ownCloud の apps/user_webdavauth/settings.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5608	2012-12-19 16:11	2012-11-13	Show	GitHub Exploit DB Packet Storm

230220	5	警告	ownCloud	-	ownCloud の "ロスト・パスワード" リセット機能におけるアカウントのパスワードを変更される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-5607	2012-12-19 16:04	2012-10-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211801	5.4	MEDIUM Network	mahara	mahara	An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. The collection title is vulnerable to Cross Site Scripting (XSS) due to not escaping it when vi…	CWE-79 Cross-site Scripting	CVE-2019-9709	2024-11-21 13:52	2019-05-7	Show	GitHub Exploit DB Packet Storm

211802	7.5	HIGH Network	phpbb	phpbb	The fulltext search component in phpBB before 3.2.6 allows Denial of Service.	CWE-20 Improper Input Validation	CVE-2019-9826	2024-11-21 13:52	2019-05-3	Show	GitHub Exploit DB Packet Storm

211803	8.8	HIGH Network	mozilla	thunderbird firefox firefox_esr	Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox < 66.0.1, Firef…	CWE-843 Type Confusion	CVE-2019-9813	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

211804	8.8	HIGH Network	mozilla redhat	thunderbird firefox firefox_esr enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus	Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-9810	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

211805	7.5	HIGH Network	mozilla	firefox	If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert messages for these resources through invalid credentials or locations. These mess…	CWE-399 Resource Management Errors	CVE-2019-9809	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

211806	5.3	MEDIUM Network	mozilla	firefox	If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the…	CWE-346 Origin Validation Error	CVE-2019-9808	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

211807	4.3	MEDIUM Network	mozilla	firefox	When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for soc…	CWE-20 Improper Input Validation	CVE-2019-9807	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

211808	7.5	HIGH Network	mozilla	firefox	A vulnerability exists during authorization prompting for FTP transaction where successive modal prompts are displayed and cannot be immediately dismissed. This allows for a denial of service (DOS) a…	CWE-399 Resource Management Errors	CVE-2019-9806	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

211809	9.8	CRITICAL Network	mozilla	firefox	A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, leading to potential memory corruption. This vulnerability affects Firefox < 66.	CWE-908 Use of Uninitialized Resource	CVE-2019-9805	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

211810	9.8	CRITICAL Network	mozilla	firefox	In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if…	CWE-78 OS Command	CVE-2019-9804	2024-11-21 13:52	2019-04-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed