Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252411	9.3	危険	アップル	-	Apple Mac OS X の Disk Image における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1841	2010-11-29 15:45	2010-11-15	Show	GitHub Exploit DB Packet Storm

252412	7.5	危険	アップル	-	Apple Mac OS X の password-validation 機能におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1840	2010-11-29 15:43	2010-11-15	Show	GitHub Exploit DB Packet Storm

252413	4.4	警告	アップル	-	Apple Mac OS X の Directory Services における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-1838	2010-11-29 15:41	2010-11-15	Show	GitHub Exploit DB Packet Storm

252414	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2174	2010-11-29 15:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

252415	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2173	2010-11-29 15:26	2010-06-10	Show	GitHub Exploit DB Packet Storm

252416	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2172	2010-11-29 15:25	2010-06-10	Show	GitHub Exploit DB Packet Storm

252417	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2171	2010-11-29 15:24	2010-06-10	Show	GitHub Exploit DB Packet Storm

252418	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2170	2010-11-29 15:21	2010-06-10	Show	GitHub Exploit DB Packet Storm

252419	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2169	2010-11-29 15:18	2010-06-10	Show	GitHub Exploit DB Packet Storm

252420	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2167	2010-11-29 15:17	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222871	9.8	CRITICAL Network	libsdl redhat	simple_directmedia_layer enterprise_linux	A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through …	-	CVE-2019-14906	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222872	8.8	HIGH Network	redhat	openshift_container_platform	A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the …	-	CVE-2019-14819	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222873	5.4	MEDIUM Network	moodle	moodle	A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revok…	CWE-273 Improper Check for Dropped Privileges	CVE-2019-14879	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222874	7.3	HIGH Local	gnu redhat	cpio enterprise_linux	In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting ar…	NVD-CWE-Other	CVE-2019-14866	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222875	6.5	MEDIUM Network	redhat	openshift_container_platform	OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to …	-	CVE-2019-14854	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222876	8.8	HIGH Network	redhat	single_sign-on jboss_enterprise_application_platform	A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access un…	CWE-863 Incorrect Authorization	CVE-2019-14843	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222877	9.1	CRITICAL Network	redhat	keycloak single_sign-on	A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. Fo…	CWE-798 Use of Hard-coded Credentials	CVE-2019-14837	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222878	3.7	LOW Network	thekelleys fedoraproject	dnsmasq fedora	A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.	-	CVE-2019-14834	2024-11-21 13:27	2020-01-8	Show	GitHub Exploit DB Packet Storm

222879	6.5	MEDIUM Network	redhat debian opensuse	cloudforms_management_engine ceph_storage ansible_tower ansible enterprise_linux debian_linux leap backports_sle	Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used…	-	CVE-2019-14864	2024-11-21 13:27	2020-01-3	Show	GitHub Exploit DB Packet Storm

222880	6.1	MEDIUM Network	angularjs redhat	angular.js decision_manager process_automation	There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted …	CWE-79 Cross-site Scripting	CVE-2019-14863	2024-11-21 13:27	2020-01-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed