Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251151 4.3 警告 Google - Google Chrome におけるポップアップブロッカーを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4037 2011-01-26 13:10 2010-10-19 Show GitHub Exploit DB Packet Storm
251152 6.8 警告 Google - Google Chrome における URL をなりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4036 2011-01-26 13:08 2010-10-19 Show GitHub Exploit DB Packet Storm
251153 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4035 2011-01-26 13:06 2010-10-19 Show GitHub Exploit DB Packet Storm
251154 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4034 2011-01-26 13:04 2010-10-19 Show GitHub Exploit DB Packet Storm
251155 5 警告 Google - Google Chrome におけるプロファイルスパム攻撃を誘導される脆弱性 CWE-Other
その他 		CVE-2010-4033 2011-01-26 13:01 2010-10-19 Show GitHub Exploit DB Packet Storm
251156 9.3 危険 Google - WebKit の WebCore 内にある toAlphabetic 関数における一つずれ (off-by-one) エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1773 2011-01-26 12:59 2010-06-8 Show GitHub Exploit DB Packet Storm
251157 7.2 危険 GNU Project
VMware
サイバートラスト株式会社
レッドハット		 - GNU C library の ld.so における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3856 2011-01-25 15:48 2010-10-25 Show GitHub Exploit DB Packet Storm
251158 5.8 警告 Mozilla Foundation
オラクル		 - Mozilla Firefox の JavaScript 実装内にある js_InitRandom 関数におけるシード値を推測される脆弱性 CWE-310
暗号の問題 		CVE-2010-3400 2011-01-25 15:15 2010-09-15 Show GitHub Exploit DB Packet Storm
251159 4.3 警告 Mozilla Foundation
オラクル		 - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2117 2011-01-25 15:13 2010-06-1 Show GitHub Exploit DB Packet Storm
251160 6.8 警告 アップル - Apple Mac OS X における脆弱性に対するアップデート CWE-134
書式文字列の問題 		CVE-2010-4013 2011-01-25 15:10 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212631 8.8 HIGH
Network 		libsdl
debian
opensuse
fedoraproject
canonical 		simple_directmedia_layer
debian_linux
leap
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c. CWE-125
Out-of-bounds Read 		CVE-2019-7638 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212632 8.8 HIGH
Network 		libsdl
debian
opensuse
fedoraproject
canonical 		simple_directmedia_layer
debian_linux
leap
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c. CWE-787
 Out-of-bounds Write 		CVE-2019-7637 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212633 8.1 HIGH
Network 		libsdl
opensuse
debian
fedoraproject
canonical 		simple_directmedia_layer
leap
debian_linux
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c. CWE-125
Out-of-bounds Read 		CVE-2019-7636 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212634 8.1 HIGH
Network 		libsdl
opensuse
debian
fedoraproject
canonical 		simple_directmedia_layer
leap
backports_sle
debian_linux
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. CWE-125
Out-of-bounds Read 		CVE-2019-7635 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212635 8.8 HIGH
Network 		lifesize team_220_firmware
passport_220_firmware
networker_220_firmware
room_220_firmware 		LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtu_size parameter. The li… CWE-78
OS Command  		CVE-2019-7632 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212636 5.9 MEDIUM
Network 		redhat pagure Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle attackers to read these e-mails and gain access to Pagure on be… CWE-200
Information Exposure 		CVE-2019-7628 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212637 9.8 CRITICAL
Network 		nginx unit NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service (router process cr… CWE-787
 Out-of-bounds Write 		CVE-2019-7401 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212638 9.8 CRITICAL
Network 		bo-blog bw Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function. CWE-89
SQL Injection 		CVE-2019-7587 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212639 9.8 CRITICAL
Network 		bijiadao waimai_super_cms An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI. CWE-89
SQL Injection 		CVE-2019-7585 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
212640 8.8 HIGH
Network 		libming libming The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-7582 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm