Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252081	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3702	2011-05-9 11:26	2010-10-7	Show	GitHub Exploit DB Packet Storm

252082	7.5	危険	サイバートラスト株式会社 The Perl Foundation レッドハットオラクル	-	Perl の Safe モジュールにおける任意のコードを挿入または実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1168	2011-05-9 11:13	2010-06-7	Show	GitHub Exploit DB Packet Storm

252083	9.3	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla NSS の正規表現の解析における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2404	2011-05-9 11:11	2009-08-1	Show	GitHub Exploit DB Packet Storm

252084	7.5	危険	アップルサイバートラスト株式会社 xmlsoft.org レッドハットオラクル	-	libxslt の pattern.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1767	2011-05-9 11:07	2008-05-21	Show	GitHub Exploit DB Packet Storm

252085	9.3	危険	レッドハット GNOME Project オラクル	-	Evolution の iCalendar 添付ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1109	2011-05-9 11:04	2008-06-4	Show	GitHub Exploit DB Packet Storm

252086	7.6	危険	レッドハット GNOME Project オラクル	-	Evolution のタイムゾーン処理に関するバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1108	2011-05-9 10:51	2008-06-4	Show	GitHub Exploit DB Packet Storm

252087	2.6	注意	レッドハットオラクル	-	gedit の不正なファイル名の処理によるフォーマットストリングの脆弱性	-	CVE-2005-1686	2011-05-9 10:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

252088	7.8	危険	シスコシステムズ	-	Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4683	2011-05-9 10:22	2011-01-7	Show	GitHub Exploit DB Packet Storm

252089	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1234	2011-05-6 11:28	2011-04-12	Show	GitHub Exploit DB Packet Storm

252090	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0675	2011-05-6 11:27	2011-04-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223691	6.1	MEDIUM Network	moodle	moodle	A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages.	CWE-79 Cross-site Scripting	CVE-2019-14884	2024-11-21 13:27	2020-03-18	Show	GitHub Exploit DB Packet Storm

223692	5.3	MEDIUM Network	moodle	moodle	A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7 before 3.7.3, where tokens used to fetch inline atachments in email notifications were not disabled when a user's account was no longer ac…	CWE-862 Missing Authorization	CVE-2019-14883	2024-11-21 13:27	2020-03-18	Show	GitHub Exploit DB Packet Storm

223693	6.1	MEDIUM Network	moodle	moodle	A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page.	CWE-601 Open Redirect	CVE-2019-14882	2024-11-21 13:27	2020-03-18	Show	GitHub Exploit DB Packet Storm

223694	6.1	MEDIUM Network	moodle	moodle	A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed.	CWE-79 Cross-site Scripting	CVE-2019-14881	2024-11-21 13:27	2020-03-18	Show	GitHub Exploit DB Packet Storm

223695	9.1	CRITICAL Network	redhat	jboss_enterprise_application_platform single_sign-on jboss_fuse jboss_data_grid wildfly openshift_application_runtimes	A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildf…	NVD-CWE-Other	CVE-2019-14887	2024-11-21 13:27	2020-03-17	Show	GitHub Exploit DB Packet Storm

223696	6.7	MEDIUM Local	intel	field_programmable_gate_array_programmable_acceleration_card_n3000_firmware	Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local ac…	NVD-CWE-noinfo	CVE-2019-14626	2024-11-21 13:27	2020-03-13	Show	GitHub Exploit DB Packet Storm

223697	4.4	MEDIUM Local	intel	field_programmable_gate_array_programmable_acceleration_card_n3000_firmware	Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denial of service via local access.	NVD-CWE-Other	CVE-2019-14625	2024-11-21 13:27	2020-03-13	Show	GitHub Exploit DB Packet Storm

223698	5.8	MEDIUM Local	qemu	qemu	hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space.	CWE-120 Classic Buffer Overflow	CVE-2019-15034	2024-11-21 13:27	2020-03-11	Show	GitHub Exploit DB Packet Storm

223699	6.5	MEDIUM Network	redhat	decision_manager process_automation_manager	A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The encoding used for storing the passwords is B…	-	CVE-2019-14886	2024-11-21 13:27	2020-03-6	Show	GitHub Exploit DB Packet Storm

223700	9.8	CRITICAL Network	fasterxml netapp oracle	jackson-databind steelstore_cloud_integrated_storage oncommand_api_services goldengate_stream_analytics	A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when u…	CWE-502 Deserialization of Untrusted Data	CVE-2019-14893	2024-11-21 13:27	2020-03-3	Show	GitHub Exploit DB Packet Storm