Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251281	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3276	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251282	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3275	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251283	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の Employee Search Engine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3274	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251284	5	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3273	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251285	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の security-questions 実装における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3272	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251286	6.8	警告	IBM	-	IBM WAS の Integrated Solutions Console におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3271	2012-03-27 18:42	2011-07-18	Show	GitHub Exploit DB Packet Storm

251287	6.8	警告	シスコシステムズ	-	Cisco WebEx Meeting Center T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3270	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

251288	9.3	危険	シスコシステムズ	-	Cisco WRF および ARF Player T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3269	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

251289	6.4	警告	orbeon	-	Orbeon Forms の XForms サービスの xforms-server コンポーネントにおけるイントラネットサーバへ HTTP リクエストを送信される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3260	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251290	5	警告	シマンテックインテル	-	Symantec Antivirus Corporate Edition などで使用される Intel AMS の GetStringAMSHandler 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3268	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222561	7.5	HIGH Network	facebook	thrift	Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-3564	2024-11-21 13:42	2019-05-7	Show	GitHub Exploit DB Packet Storm

222562	7.5	HIGH Network	facebook	thrift	Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time f…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-3559	2024-11-21 13:42	2019-05-7	Show	GitHub Exploit DB Packet Storm

222563	7.5	HIGH Network	facebook	thrift	Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-3558	2024-11-21 13:42	2019-05-7	Show	GitHub Exploit DB Packet Storm

222564	7.5	HIGH Network	facebook	thrift	C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-3552	2024-11-21 13:42	2019-05-7	Show	GitHub Exploit DB Packet Storm

222565	8.8	HIGH Network	redhat	wildfly jboss_enterprise_application_platform	It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if …	NVD-CWE-noinfo	CVE-2019-3894	2024-11-21 13:42	2019-05-4	Show	GitHub Exploit DB Packet Storm

222566	4.7	MEDIUM Local	redhat	jboss_enterprise_application_platform wildfly	A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could explo…	CWE-269 Improper Privilege Management	CVE-2019-3805	2024-11-21 13:42	2019-05-4	Show	GitHub Exploit DB Packet Storm

222567	6.1	MEDIUM Network	atlassian	jira_server	The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerabil…	CWE-79 Cross-site Scripting	CVE-2019-3400	2024-11-21 13:42	2019-05-4	Show	GitHub Exploit DB Packet Storm

222568	6.1	MEDIUM Network	microfocus	open_enterprise_server	A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the v…	CWE-79 Cross-site Scripting	CVE-2019-3490	2024-11-21 13:42	2019-05-3	Show	GitHub Exploit DB Packet Storm

222569	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remote attacker can use t…	CWE-798 Use of Hard-coded Credentials	CVE-2019-3939	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

222570	7.8	HIGH Local	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the file generated via the "export configuration" feature. The c…	CWE-798 Use of Hard-coded Credentials	CVE-2019-3938	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm