Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252541	6.9	警告	Mozilla Foundation	-	Windows 上で稼働する複数の Mozilla 製品における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3181	2010-11-11 15:07	2010-10-19	Show	GitHub Exploit DB Packet Storm

252542	9.3	危険	アドビシステムズ	-	複数の Adobe 製品における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-3153	2010-11-10 15:34	2010-10-18	Show	GitHub Exploit DB Packet Storm

252543	4.3	警告	アドビシステムズ	-	Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2886	2010-11-10 15:34	2010-10-18	Show	GitHub Exploit DB Packet Storm

252544	4.3	警告	アドビシステムズ	-	Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2885	2010-11-10 15:33	2010-10-18	Show	GitHub Exploit DB Packet Storm

252545	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の browser-plugin 実装における任意のプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3749	2010-11-10 15:33	2010-10-15	Show	GitHub Exploit DB Packet Storm

252546	10	危険	リアルネットワークス	-	RealNetworks RealPlayer の RichFX コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3748	2010-11-10 15:32	2010-10-15	Show	GitHub Exploit DB Packet Storm

252547	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3751	2010-11-10 15:32	2010-10-15	Show	GitHub Exploit DB Packet Storm

252548	10	危険	SAP	-	SAP BusinessObjects Axis2 におけるデフォルトパスワードの問題	CWE-255 証明書・パスワード管理	CVE-2010-0219	2010-11-10 15:32	2010-10-14	Show	GitHub Exploit DB Packet Storm

252549	4	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0781	2010-11-9 15:30	2010-09-13	Show	GitHub Exploit DB Packet Storm

252550	10	危険	IBM	-	IBM WebSphere Application Server における脆弱性	CWE-20 不適切な入力確認	CVE-2010-3186	2010-11-9 15:30	2010-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222941	6.5	MEDIUM Network	libav	libav	In Libav 12.3, there is an infinite loop in the function wv_read_block_header() in the file wvdec.c.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-14372	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222942	6.5	MEDIUM Network	libav	libav	An issue was discovered in Libav 12.3. There is an infinite loop in the function mov_probe in the file libavformat/mov.c, related to offset and tag.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-14371	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222943	6.5	MEDIUM Network	exiv2 debian	exiv2 debian_linux	In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp. It could result in denial of service.	CWE-125 Out-of-bounds Read	CVE-2019-14370	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222944	6.5	MEDIUM Network	exiv2 debian	exiv2 debian_linux	Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file.	CWE-125 Out-of-bounds Read	CVE-2019-14369	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222945	7.8	HIGH Local	exiv2	exiv2	Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.	CWE-125 Out-of-bounds Read	CVE-2019-14368	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222946	6.1	MEDIUM Network	icegram	email_subscribers_\&_newsletters	An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using th…	CWE-79 Cross-site Scripting	CVE-2019-14364	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222947	9.8	CRITICAL Network	netgear	wndr3400v3_firmware	A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.18_1.0.63 allows an attacker to remotely execute arbitrary code via a crafted UPnP …	CWE-787 Out-of-bounds Write	CVE-2019-14363	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222948	5.4	MEDIUM Network	openbravo	openbravo_erp	Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNew…	CWE-22 Path Traversal	CVE-2019-14362	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222949	7.8	HIGH Local	joget	worfklow	In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account_new with the Account ID or Account Name…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-14352	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

222950	8.8	HIGH Network	espocrm	espocrm	EspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker can brute-force a user password hash by 1 symbol at a time using specially crafted api/v1/User?filter…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-14351	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed