Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252341	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1813	2010-12-8 15:52	2010-09-8	Show	GitHub Exploit DB Packet Storm

252342	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0784	2010-12-8 15:31	2010-11-9	Show	GitHub Exploit DB Packet Storm

252343	6.8	警告	シックス・アパート株式会社	-	Movable Type における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3922	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

252344	4.3	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3921	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

252345	2.1	注意	セイコーエプソン株式会社	-	EPSON 製プリンタドライバのインストーラがアクセス権を変更する脆弱性	CWE-DesignError	CVE-2010-3920	2010-12-8 14:01	2010-12-8	Show	GitHub Exploit DB Packet Storm

252346	10	危険	アドビシステムズ	-	Adobe Flash Media Server における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3635	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252347	5	警告	アドビシステムズ	-	Adobe Flash Media Server のエッジプロセスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3634	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252348	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-3633	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252349	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Signurl.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3936	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252350	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway のモバイルポータルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2734	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211711	7.8	HIGH Local	pdfalto_project xpdfreader	pdfalto xpdf	There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a c…	CWE-125 Out-of-bounds Read	CVE-2019-9878	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211712	7.8	HIGH Local	xpdfreader	xpdf	There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-9877	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211713	9.8	CRITICAL Network	oembed_project	oembed	plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.	CWE-19 Data Processing Errors	CVE-2019-9870	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211714	7.2	HIGH Network	veritas	netbackup_appliance	An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator.	CWE-522 Insufficiently Protected Credentials	CVE-2019-9868	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211715	7.2	HIGH Network	veritas	netbackup_appliance	An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator.	CWE-522 Insufficiently Protected Credentials	CVE-2019-9867	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211716	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark()…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-9857	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211717	6.1	MEDIUM Network	openid	openid_connect	Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that result…	CWE-601 Open Redirect	CVE-2019-9837	2024-11-21 13:52	2019-03-22	Show	GitHub Exploit DB Packet Storm

211718	9.6	CRITICAL Adjacent	fujitsu	lx901_firmware gk900_firmware	The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legiti…	NVD-CWE-noinfo	CVE-2019-9835	2024-11-21 13:52	2019-03-16	Show	GitHub Exploit DB Packet Storm

211719	7.5	HIGH Network	screen_stream_project	screen_stream	The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop requests.	NVD-CWE-noinfo	CVE-2019-9833	2024-11-21 13:52	2019-03-16	Show	GitHub Exploit DB Packet Storm

211720	7.5	HIGH Network	airdrop_project	airdrop	The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that makes many socket connections through a configured port.	NVD-CWE-noinfo	CVE-2019-9832	2024-11-21 13:52	2019-03-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed