Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252541 6.9 警告 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3181 2010-11-11 15:07 2010-10-19 Show GitHub Exploit DB Packet Storm
252542 9.3 危険 アドビシステムズ - 複数の Adobe 製品における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2010-3153 2010-11-10 15:34 2010-10-18 Show GitHub Exploit DB Packet Storm
252543 4.3 警告 アドビシステムズ - Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2886 2010-11-10 15:34 2010-10-18 Show GitHub Exploit DB Packet Storm
252544 4.3 警告 アドビシステムズ - Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2885 2010-11-10 15:33 2010-10-18 Show GitHub Exploit DB Packet Storm
252545 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の browser-plugin 実装における任意のプログラムを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-3749 2010-11-10 15:33 2010-10-15 Show GitHub Exploit DB Packet Storm
252546 10 危険 リアルネットワークス - RealNetworks RealPlayer の RichFX コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3748 2010-11-10 15:32 2010-10-15 Show GitHub Exploit DB Packet Storm
252547 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3751 2010-11-10 15:32 2010-10-15 Show GitHub Exploit DB Packet Storm
252548 10 危険 SAP - SAP BusinessObjects Axis2 におけるデフォルトパスワードの問題 CWE-255
証明書・パスワード管理
CVE-2010-0219 2010-11-10 15:32 2010-10-14 Show GitHub Exploit DB Packet Storm
252549 4 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0781 2010-11-9 15:30 2010-09-13 Show GitHub Exploit DB Packet Storm
252550 10 危険 IBM - IBM WebSphere Application Server における脆弱性 CWE-20
不適切な入力確認
CVE-2010-3186 2010-11-9 15:30 2010-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211481 9.8 CRITICAL
Network
wpengine wpgraphql The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutatio… CWE-306
Missing Authentication for Critical Function
CVE-2019-9879 2024-11-21 13:52 2019-06-11 Show GitHub Exploit DB Packet Storm
211482 8.8 HIGH
Network
northern cfengine Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2019-9929 2024-11-21 13:52 2019-06-7 Show GitHub Exploit DB Packet Storm
211483 9.8 CRITICAL
Network
pydio pydio An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by placing it on the fourth line of a .php fi… CWE-22
CWE-434
Path Traversal
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-9642 2024-11-21 13:52 2019-06-6 Show GitHub Exploit DB Packet Storm
211484 8.8 HIGH
Local
synaptics sound_device Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an un… NVD-CWE-noinfo
CVE-2019-9730 2024-11-21 13:52 2019-06-6 Show GitHub Exploit DB Packet Storm
211485 8.8 HIGH
Network
freenetproject freenet Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI. CWE-19
 Data Processing Errors
CVE-2019-9673 2024-11-21 13:52 2019-06-6 Show GitHub Exploit DB Packet Storm
211486 6.1 MEDIUM
Network
gilacms gila_cms Gila CMS 1.9.1 has XSS. CWE-79
Cross-site Scripting
CVE-2019-9647 2024-11-21 13:52 2019-06-6 Show GitHub Exploit DB Packet Storm
211487 7.0 HIGH
Local
tuxera
redhat
ntfs-3g
enterprise_linux_server
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to … CWE-787
CWE-191
 Out-of-bounds Write
 Integer Underflow (Wrap or Wraparound)
CVE-2019-9755 2024-11-21 13:52 2019-06-6 Show GitHub Exploit DB Packet Storm
211488 6.1 MEDIUM
Network
vfront vfront VFront 0.99.5 has Reflected XSS via the admin/menu_registri.php descrizione_g parameter or the admin/sync_reg_tab.php azzera parameter. CWE-79
Cross-site Scripting
CVE-2019-9839 2024-11-21 13:52 2019-06-4 Show GitHub Exploit DB Packet Storm
211489 6.1 MEDIUM
Network
vfront vfront VFront 0.99.5 has stored XSS via the admin/sync_reg_tab.php azzera parameter, which is mishandled during admin/error_log.php rendering. CWE-79
Cross-site Scripting
CVE-2019-9838 2024-11-21 13:52 2019-06-4 Show GitHub Exploit DB Packet Storm
211490 5.5 MEDIUM
Local
qemu qemu tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure. CWE-908
 Use of Uninitialized Resource
CVE-2019-9824 2024-11-21 13:52 2019-06-4 Show GitHub Exploit DB Packet Storm