Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 4, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252291 | 7.5 | 危険 | アップル サイバートラスト株式会社 The PHP Group ターボリナックス ヒューレット・パッカード レッドハット |
- | PHP における exif のチェックに関する脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3292 | 2010-12-15 12:41 | 2009-09-16 | Show | GitHub Exploit DB Packet Storm |
| 252292 | 7.5 | 危険 | アップル サイバートラスト株式会社 The PHP Group ターボリナックス ヒューレット・パッカード レッドハット |
- | PHP の php_openssl_apply_verification_policy 関数における証明書の検証処理に関する脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-3291 | 2010-12-15 12:40 | 2009-09-16 | Show | GitHub Exploit DB Packet Storm |
| 252293 | 4.3 | 警告 | The PHP Group サイバートラスト株式会社 ターボリナックス ヒューレット・パッカード レッドハット |
- | PHP の exif_read_data 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-2687 | 2010-12-15 12:39 | 2009-08-5 | Show | GitHub Exploit DB Packet Storm |
| 252294 | 9.3 | 危険 | アップル サイバートラスト株式会社 レッドハット オラクル Info-ZIP |
- | UnZip の NEEDBITS マクロにおける無効なバッファ領域を参照してしまう問題 |
CWE-119
バッファエラー |
CVE-2008-0888 | 2010-12-15 12:37 | 2008-03-17 | Show | GitHub Exploit DB Packet Storm |
| 252295 | 6 | 警告 | PostgreSQL.org サイバートラスト株式会社 レッドハット ターボリナックス オラクル |
- | PostgreSQL における任意の Tcl コードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1170 | 2010-12-15 12:35 | 2010-05-17 | Show | GitHub Exploit DB Packet Storm |
| 252296 | 8.5 | 危険 | PostgreSQL.org サイバートラスト株式会社 レッドハット ターボリナックス オラクル |
- | PostgreSQL における任意の Perl コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-1169 | 2010-12-15 12:31 | 2010-05-17 | Show | GitHub Exploit DB Packet Storm |
| 252297 | 6.5 | 警告 | Openswan レッドハット |
- | Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性 |
CWE-78
OSコマンド・インジェクション |
CVE-2010-3753 | 2010-12-14 14:24 | 2010-09-27 | Show | GitHub Exploit DB Packet Storm |
| 252298 | 6.5 | 警告 | Openswan レッドハット |
- | Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性 |
CWE-78
OSコマンド・インジェクション |
CVE-2010-3752 | 2010-12-14 14:22 | 2010-09-27 | Show | GitHub Exploit DB Packet Storm |
| 252299 | 6.5 | 警告 | Openswan レッドハット |
- | Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3308 | 2010-12-14 14:20 | 2010-09-27 | Show | GitHub Exploit DB Packet Storm |
| 252300 | 6.5 | 警告 | Openswan レッドハット |
- | Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3302 | 2010-12-14 14:15 | 2010-09-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 5, 2026, 4:51 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 212271 | 9.8 |
CRITICAL
Network |
eq-3 |
homematic_ccu2_firmware homematic_ccu3_firmware |
eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile details, shutting down the VPN service and to delete the VPN servic… |
CWE-425
Direct Request ('Forced Browsing') |
CVE-2019-9584 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212272 | 8.2 |
HIGH
Network |
eq-3 |
homematic_ccu3_firmware homematic_ccu2_firmware |
eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service and is a starting point for other attacks. Affected versions for CCU2: 2.35.16, 2.41.5, 2.41.8, 2.41.9, … |
CWE-400
Uncontrolled Resource Consumption |
CVE-2019-9583 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212273 | 7.5 |
HIGH
Network |
eq-3 | homematic_ccu2_firmware | eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. CCU2 affected versions: 2.35.16, 2.41.5, 2.41.8, 2.41.9, 2.45.6, 2.45.7, 2.47.10, 2.47.12, 2.47.15. |
NVD-CWE-noinfo
|
CVE-2019-9582 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212274 | 8.1 |
HIGH
Adjacent |
google apple canonical debian opensuse redhat huawei |
android mac_os_x watchos iphone_os tvos ubuntu_linux debian_linux leap enterprise_linux_server enterprise_linux_for_real_time enterprise_linux_for_real_time_for_nfv e… |
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This al… |
CWE-327
Use of a Broken or Risky Cryptographic Algorithm |
CVE-2019-9506 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212275 | 7.5 |
HIGH
Network |
apple apache canonical debian synology fedoraproject opensuse redhat oracle mcafee nodejs |
swiftnio traffic_server ubuntu_linux debian_linux skynas diskstation_manager vs960hd_firmware fedora leap software_collections jboss_core_services enterprise_linux
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-s…
|
CWE-770
|
Allocation of Resources Without Limits or Throttling
CVE-2019-9518
|
2024-11-21 13:51 |
2019-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 212276 | 7.5 |
HIGH
Network |
apple apache canonical debian synology fedoraproject opensuse redhat oracle mcafee netapp nodejs |
swiftnio traffic_server http_server ubuntu_linux debian_linux skynas diskstation_manager vs960hd_firmware fedora leap software_collections jboss_core_services ente… |
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without const… |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2019-9517 | 2024-11-21 13:51 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 212277 | 6.5 |
MEDIUM
Network |
apple apache canonical debian fedoraproject synology opensuse redhat oracle mcafee f5 nodejs |
swiftnio traffic_server ubuntu_linux debian_linux fedora skynas diskstation_manager vs960hd_firmware leap software_collections jboss_core_services enterprise_linux
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, …
|
CWE-770
|
Allocation of Resources Without Limits or Throttling
CVE-2019-9516
|
2024-11-21 13:51 |
2019-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 212278 | 7.5 |
HIGH
Network |
apple apache debian nodejs |
swiftnio traffic_server debian_linux node.js |
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queu… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2019-9512 | 2024-11-21 13:51 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 212279 | 7.5 |
HIGH
Network |
apple apache canonical debian synology fedoraproject opensuse redhat oracle mcafee f5 nodejs |
swiftnio traffic_server ubuntu_linux debian_linux skynas diskstation_manager vs960hd_firmware fedora leap software_collections jboss_core_services enterprise_linux
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the…
|
CWE-770
|
Allocation of Resources Without Limits or Throttling
CVE-2019-9515
|
2024-11-21 13:51 |
2019-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 212280 | 7.5 |
HIGH
Network |
apple apache debian canonical synology fedoraproject opensuse redhat oracle mcafee netapp f5 nodejs |
swiftnio traffic_server debian_linux ubuntu_linux skynas diskstation_manager vs960hd_firmware fedora leap enterprise_linux_workstation enterprise_linux_server softwar… |
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that shou… |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2019-9514 | 2024-11-21 13:51 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |