Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252501 4.3 警告 ApPHP - ApPHP Calendar の calendar.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4880 2012-01-19 10:33 2011-10-7 Show GitHub Exploit DB Packet Storm
252502 7.5 危険 Hinnendahl - Kontakt Formular の formmailer.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4878 2012-01-19 10:32 2011-10-7 Show GitHub Exploit DB Packet Storm
252503 4.3 警告 InsaneVisions - OneCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4877 2012-01-19 10:31 2011-10-7 Show GitHub Exploit DB Packet Storm
252504 7.5 危険 got milk - mBlogger の viewpost.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4876 2012-01-19 10:30 2011-10-7 Show GitHub Exploit DB Packet Storm
252505 4.3 警告 Xondie - WordPress 用 Vodpod Video Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4875 2012-01-19 10:30 2011-10-7 Show GitHub Exploit DB Packet Storm
252506 4.3 警告 NinkoBB - NinkoBB の users.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4874 2012-01-19 10:28 2011-10-7 Show GitHub Exploit DB Packet Storm
252507 4.3 警告 WeBid Support - WeBid におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4873 2012-01-19 10:27 2011-10-7 Show GitHub Exploit DB Packet Storm
252508 7.5 危険 PilotCart - ASPilot Pilot Cart の newsroom.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4872 2012-01-19 10:27 2011-10-7 Show GitHub Exploit DB Packet Storm
252509 10 危険 SmartSoft - SmartFTP における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2010-4871 2012-01-19 10:26 2011-10-7 Show GitHub Exploit DB Packet Storm
252510 7.5 危険 bloofox - BloofoxCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4870 2012-01-19 10:25 2011-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221191 5.5 MEDIUM
Local
gnu glibc In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significan… NVD-CWE-noinfo
CVE-2019-7309 2024-11-21 13:47 2019-02-3 Show GitHub Exploit DB Packet Storm
221192 5.6 MEDIUM
Local
linux
canonical
opensuse
linux_kernel
ubuntu_linux
leap
kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different sta… CWE-189
Numeric Errors
CVE-2019-7308 2024-11-21 13:47 2019-02-2 Show GitHub Exploit DB Packet Storm
221193 7.2 HIGH
Network
zevenet zen_load_balancer Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metacharacters in the index.cgi?action=View_Cert certname parameter. CWE-78
OS Command 
CVE-2019-7301 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm
221194 7.2 HIGH
Network
articatech artica_proxy Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fields, using these credentials at logon.php… CWE-522
 Insufficiently Protected Credentials
CVE-2019-7300 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm
221195 8.1 HIGH
Network
dlink dir-823g_firmware An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. Thi… CWE-78
OS Command 
CVE-2019-7298 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm
221196 9.8 CRITICAL
Network
d-link dir-823g_firmware An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a cra… CWE-78
OS Command 
CVE-2019-7297 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm
221197 6.1 MEDIUM
Network
typora typora typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula. CWE-79
Cross-site Scripting
CVE-2019-7296 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm
221198 6.1 MEDIUM
Network
typora typora typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula. CWE-79
Cross-site Scripting
CVE-2019-7295 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm
221199 7.4 HIGH
Network
netkit
debian
netkit
debian_linux
An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validatio… NVD-CWE-noinfo
CVE-2019-7283 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm
221200 5.9 MEDIUM
Network
netkit
debian
fedoraproject
netkit
debian_linux
fedora
In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of… NVD-CWE-noinfo
CVE-2019-7282 2024-11-21 13:47 2019-02-1 Show GitHub Exploit DB Packet Storm