Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 7, 2026, 2:09 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252491 | 7.2 | 危険 | マイクロソフト | - | 複数の Microsoft 製品の Consent User Interface における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3961 | 2011-01-17 15:06 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252492 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows 製品の Routing and Remote Access NDProxy コンポーネントにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3963 | 2011-01-17 15:03 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252493 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3944 | 2011-01-17 14:45 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252494 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3943 | 2011-01-17 14:38 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252495 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3942 | 2011-01-17 14:35 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252496 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3941 | 2011-01-17 14:29 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252497 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3940 | 2011-01-14 15:55 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252498 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows のカーネルモードドライバ内にある win32k.sys におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3939 | 2011-01-14 15:53 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252499 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows の Internet Connection Signup Wizard における権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2010-3144 | 2011-01-14 15:49 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 252500 | 9.3 | 危険 | マイクロソフト | - | Windows Address Book の wab.exe における権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2010-3147 | 2011-01-14 15:47 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 7, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 222731 | 5.4 |
MEDIUM
Network |
thedaylightstudio | fuel_cms | FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated acc… |
CWE-79
Cross-site Scripting |
CVE-2019-15228 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222732 | 7.5 |
HIGH
Network |
envoyproxy | envoy | In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to r… |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2019-15225 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222733 | 9.8 |
CRITICAL
Network |
rest-client_project | rest-client | The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected. |
CWE-94
Code Injection |
CVE-2019-15224 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222734 | 4.6 |
MEDIUM
Physics |
linux netapp canonical |
linux_kernel h410c_firmware data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller ubuntu_linux |
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver. |
CWE-476
NULL Pointer Dereference |
CVE-2019-15223 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222735 | 4.6 |
MEDIUM
Physics |
linux netapp opensuse |
linux_kernel h410c_firmware data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller leap |
An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver. |
CWE-476
NULL Pointer Dereference |
CVE-2019-15222 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222736 | 4.6 |
MEDIUM
Physics |
linux netapp canonical debian opensuse |
linux_kernel h410c_firmware data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller ubuntu_linux debia… |
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. |
CWE-476
NULL Pointer Dereference |
CVE-2019-15221 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222737 | 4.6 |
MEDIUM
Physics |
linux netapp canonical debian opensuse |
linux_kernel h410c_firmware data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller ubuntu_linux debia… |
An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. |
CWE-416
Use After Free |
CVE-2019-15220 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222738 | 4.6 |
MEDIUM
Physics |
linux netapp canonical debian opensuse |
linux_kernel h410c_firmware data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller ubuntu_linux debia… |
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. |
CWE-476
NULL Pointer Dereference |
CVE-2019-15219 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222739 | 4.6 |
MEDIUM
Physics |
linux netapp canonical debian oracle opensuse |
linux_kernel h410c_firmware data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller ubuntu_linux debia… |
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver. |
CWE-476
NULL Pointer Dereference |
CVE-2019-15218 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |
| 222740 | 4.6 |
MEDIUM
Physics |
linux netapp canonical debian opensuse |
linux_kernel h410c_firmware data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller ubuntu_linux debia… |
An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. |
CWE-476
NULL Pointer Dereference |
CVE-2019-15217 | 2024-11-21 13:28 | 2019-08-20 | Show | GitHub Exploit DB Packet Storm |