Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252621 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3215 2010-10-26 15:34 2010-10-12 Show GitHub Exploit DB Packet Storm
252622 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2750 2010-10-26 15:33 2010-10-12 Show GitHub Exploit DB Packet Storm
252623 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2748 2010-10-26 15:33 2010-10-12 Show GitHub Exploit DB Packet Storm
252624 9.3 危険 マイクロソフト - Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2747 2010-10-26 15:32 2010-10-12 Show GitHub Exploit DB Packet Storm
252625 7.2 危険 マイクロソフト - 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2741 2010-10-26 15:31 2010-10-12 Show GitHub Exploit DB Packet Storm
252626 7.2 危険 マイクロソフト - 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2740 2010-10-26 15:29 2010-10-12 Show GitHub Exploit DB Packet Storm
252627 7.2 危険 マイクロソフト - 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2744 2010-10-26 15:28 2010-10-12 Show GitHub Exploit DB Packet Storm
252628 4.9 警告 マイクロソフト - 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2549 2010-10-26 15:28 2010-10-12 Show GitHub Exploit DB Packet Storm
252629 6.5 警告 IBM - Linux 上で稼働する IBM DB2 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0462 2010-10-26 15:24 2010-01-28 Show GitHub Exploit DB Packet Storm
252630 9.3 危険 マイクロソフト - 64-bit プラットフォーム上で稼働している Microsoft .NET Framework の JIT コンパイラにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3228 2010-10-25 16:37 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222811 2.4 LOW
Physics 		mooltipass mooltipass_mini_firmware On Mooltipass Mini devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a part… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-14357 2024-11-21 13:26 2019-08-11 Show GitHub Exploit DB Packet Storm
222812 2.4 LOW
Physics 		shapeshift keepkey_firmware On ShapeShift KeepKey devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a p… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-14355 2024-11-21 13:26 2019-08-11 Show GitHub Exploit DB Packet Storm
222813 2.4 LOW
Physics 		ledger nano_s_firmware
nano_x_firmware 		On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowi… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-14354 2024-11-21 13:26 2019-08-11 Show GitHub Exploit DB Packet Storm
222814 6.5 MEDIUM
Network 		openstack
canonical
redhat
debian 		nova
ubuntu_linux
openstack
debian_linux 		An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external excepti… CWE-209
Information Exposure Through an Error Message 		CVE-2019-14433 2024-11-21 13:26 2019-08-10 Show GitHub Exploit DB Packet Storm
222815 6.5 MEDIUM
Network 		aptana jaxer Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via … CWE-22
Path Traversal 		CVE-2019-14312 2024-11-21 13:26 2019-08-9 Show GitHub Exploit DB Packet Storm
222816 9.8 CRITICAL
Network 		djangoproject
fedoraproject
debian 		django
fedora
debian_linux 		An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.… CWE-89
SQL Injection 		CVE-2019-14234 2024-11-21 13:26 2019-08-9 Show GitHub Exploit DB Packet Storm
222817 4.2 MEDIUM
Physics 		trezor one_firmware On Trezor One devices before 1.8.2, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowin… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-14353 2024-11-21 13:26 2019-08-9 Show GitHub Exploit DB Packet Storm
222818 5.5 MEDIUM
Local 		dlink 6600-ap_firmware
dwl-3600ap_firmware 		An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated denial of service leading to the reboot of the AP via the admin.cgi?action=%s URI. NVD-CWE-noinfo
CVE-2019-14335 2024-11-21 13:26 2019-08-8 Show GitHub Exploit DB Packet Storm
222819 9.8 CRITICAL
Network 		go-camo_project go-camo A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-14255 2024-11-21 13:26 2019-08-8 Show GitHub Exploit DB Packet Storm
222820 5.4 MEDIUM
Network 		1crm 1crm_on-premise 1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation. CWE-79
Cross-site Scripting 		CVE-2019-14221 2024-11-21 13:26 2019-08-8 Show GitHub Exploit DB Packet Storm