Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252121	4	警告	エイムラック	-	Aipo における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3924	2011-01-11 14:02	2011-01-11	Show	GitHub Exploit DB Packet Storm

252122	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer における SIPR ヒープオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4379	2011-01-7 15:36	2010-12-10	Show	GitHub Exploit DB Packet Storm

252123	10	危険	リアルネットワークス	-	RealNetworks RealPlayer の AAC スペクトルデータの解析処理における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0125	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

252124	5	警告	リアルネットワークス	-	RealNetworks RealPlayer の cook コーデックにおける任意のメモリへアクセスされる脆弱性	CWE-Other その他	CVE-2010-2579	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

252125	10	危険	リアルネットワークス	-	RealNetworks RealPlayer の cook コーデックにおける脆弱性	CWE-Other その他	CVE-2010-0121	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

252126	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer の drv2.dll モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4378	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

252127	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Cook Audio Codec におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4377	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

252128	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の RTSP GIF の解析処理におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4376	2011-01-7 15:34	2010-12-10	Show	GitHub Exploit DB Packet Storm

252129	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の pnen3260.dll モジュールにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4397	2011-01-7 15:34	2010-12-10	Show	GitHub Exploit DB Packet Storm

252130	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の AAC MLLT Atom 解析処理における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2999	2011-01-7 15:34	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212141	7.5	HIGH Network	ikiwiki	ikiwiki	ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-9187	2024-11-21 13:51	2019-06-6	Show	GitHub Exploit DB Packet Storm

212142	10.0	CRITICAL Network	citrix	application_delivery_management	Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-9548	2024-11-21 13:51	2019-06-6	Show	GitHub Exploit DB Packet Storm

212143	9.8	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.	NVD-CWE-noinfo	CVE-2019-9485	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

212144	5.5	MEDIUM Local	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 3 of 5).	CWE-20 Improper Input Validation	CVE-2019-9221	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

212145	9.8	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 1 of 5).	NVD-CWE-noinfo	CVE-2019-9218	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

212146	7.5	HIGH Network	aware	knomi	The Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a Biometrical Liveness authentication bypass via parameter tampering of the /knomi/analyze security_level f…	NVD-CWE-noinfo	CVE-2019-9196	2024-11-21 13:51	2019-05-16	Show	GitHub Exploit DB Packet Storm

212147	9.8	CRITICAL Network	gracemedia_media_player_project	gracemedia_media_player	The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.	CWE-22 Path Traversal	CVE-2019-9618	2024-11-21 13:51	2019-05-14	Show	GitHub Exploit DB Packet Storm

212148	9.8	CRITICAL Network	printerlogic	print_management	The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenti…	NVD-CWE-Other	CVE-2019-9505	2024-11-21 13:51	2019-05-9	Show	GitHub Exploit DB Packet Storm

212149	8.8	HIGH Network	strato telekom ionos	hidrive_desktop_client magentacloud 1\&1_online_storage	STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpo…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-9486	2024-11-21 13:51	2019-05-1	Show	GitHub Exploit DB Packet Storm

212150	7.5	HIGH Network	zimbra	collaboration_server	Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-9621	2024-11-21 13:51	2019-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed