Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251971	6.9	警告	CVS レッドハット	-	CVS の rcs.c 内にある apply_rcs_change 関数における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2010-3846	2010-12-21 15:30	2010-11-5	Show	GitHub Exploit DB Packet Storm

251972	10	危険	RealFlex Technologies	-	RealFlex RealWin HMI サービスにバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4142	2010-12-21 15:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

251973	4.3	警告	Webmin Project オラクル	-	Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4568	2010-12-21 15:14	2010-01-5	Show	GitHub Exploit DB Packet Storm

251974	6.8	警告	富士通	-	Interstage Application Server における許可されていない IP アドレスからのリクエストのアクセスを許可する脆弱性	CWE-noinfo 情報不足	-	2010-12-21 14:14	2010-11-19	Show	GitHub Exploit DB Packet Storm

251975	8.3	危険	日立	-	日立の Groupmax 関連製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-12-21 14:06	2010-11-17	Show	GitHub Exploit DB Packet Storm

251976	4.3	警告	The PHP Group アップルサイバートラスト株式会社レッドハット	-	PHP の var_export 関数における、重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2531	2010-12-20 16:08	2010-07-22	Show	GitHub Exploit DB Packet Storm

251977	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Hypervisor の命令のエミュレーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0435	2010-12-20 16:01	2010-08-19	Show	GitHub Exploit DB Packet Storm

251978	5	警告	レッドハット Pidgin オラクル	-	Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1624	2010-12-20 16:00	2010-05-12	Show	GitHub Exploit DB Packet Storm

251979	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックス日立	-	Apache HTTP Server の 413 エラーメッセージにおける HTTP メソッドを適切に検査しない問題	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6203	2010-12-20 15:38	2007-12-3	Show	GitHub Exploit DB Packet Storm

251980	4.3	警告	シマンテック	-	PGP Desktop にデータインジェクションの脆弱性	CWE-310 暗号の問題	CVE-2010-3618	2010-12-20 14:44	2010-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211151	7.8	HIGH Local	pdfalto_project xpdfreader	pdfalto xpdf	There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a c…	CWE-125 Out-of-bounds Read	CVE-2019-9878	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211152	7.8	HIGH Local	xpdfreader	xpdf	There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-9877	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211153	9.8	CRITICAL Network	oembed_project	oembed	plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.	CWE-19 Data Processing Errors	CVE-2019-9870	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211154	7.2	HIGH Network	veritas	netbackup_appliance	An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator.	CWE-522 Insufficiently Protected Credentials	CVE-2019-9868	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211155	7.2	HIGH Network	veritas	netbackup_appliance	An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator.	CWE-522 Insufficiently Protected Credentials	CVE-2019-9867	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211156	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark()…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-9857	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211157	6.1	MEDIUM Network	openid	openid_connect	Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that result…	CWE-601 Open Redirect	CVE-2019-9837	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211158	9.6	CRITICAL Adjacent	fujitsu	lx901_firmware gk900_firmware	The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legiti…	NVD-CWE-noinfo	CVE-2019-9835	2024-11-21 13:52	2019-03-16	Show	GitHub Exploit DB Packet Storm

211159	7.5	HIGH Network	screen_stream_project	screen_stream	The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop requests.	NVD-CWE-noinfo	CVE-2019-9833	2024-11-21 13:52	2019-03-16	Show	GitHub Exploit DB Packet Storm

211160	7.5	HIGH Network	airdrop_project	airdrop	The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that makes many socket connections through a configured port.	NVD-CWE-noinfo	CVE-2019-9832	2024-11-21 13:52	2019-03-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed