Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252641 7.5 危険 アップル
ClamAV
- ClamAV の libclamav の pe_icons.c 内にある icon_cb 関数における一つずれエラーの脆弱性 CWE-189
数値処理の問題
CVE-2010-4261 2011-04-25 10:17 2010-12-7 Show GitHub Exploit DB Packet Storm
252642 5 警告 アップル
ClamAV
- ClamAV の libclamav の pdf.c における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4260 2011-04-21 18:57 2010-12-7 Show GitHub Exploit DB Packet Storm
252643 9.3 危険 アップル
ClamAV
- ClamAV の find_stream_bounds 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3434 2011-04-21 17:56 2010-09-30 Show GitHub Exploit DB Packet Storm
252644 7.5 危険 Git project
オラクル
- Git の is_git_directory 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2542 2011-04-21 17:54 2010-08-11 Show GitHub Exploit DB Packet Storm
252645 5 警告 Git project
オラクル
- Git の git-daemon におけるサービス運用妨害(無限ループおよび CPU 資源の消費)の脆弱性 CWE-399
リソース管理の問題
CVE-2009-2108 2011-04-21 17:53 2009-06-18 Show GitHub Exploit DB Packet Storm
252646 4.6 警告 Git project
オラクル
- Git の gitweb/gitweb.perl における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5916 2011-04-21 17:52 2009-01-21 Show GitHub Exploit DB Packet Storm
252647 7.5 危険 Git project
オラクル
- Git の Web インターフェースにおける任意のコマンドを実行される脆弱性 CWE-264
CWE-78
CVE-2008-5516 2011-04-21 17:51 2009-01-20 Show GitHub Exploit DB Packet Storm
252648 5 警告 オラクル
CUPS
- CUPS の cupsDoAuthentication 関数におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-2432 2011-04-21 17:49 2010-03-3 Show GitHub Exploit DB Packet Storm
252649 4.3 警告 The PHP Group - PHP の zip_stream.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2011-1471 2011-04-21 17:45 2011-03-17 Show GitHub Exploit DB Packet Storm
252650 4.3 警告 The PHP Group - PHP の Zip 拡張モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-1470 2011-04-21 16:47 2011-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222141 8.8 HIGH
Network
openwrt openwrt OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, firewall/forwards, firewall/rules, network/wan, network/wan6, … CWE-352
 Origin Validation Error
CVE-2019-17367 2024-11-21 13:32 2019-10-19 Show GitHub Exploit DB Packet Storm
222142 7.5 HIGH
Network
ratpack_project ratpack An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted da… CWE-74
Injection
CVE-2019-17513 2024-11-21 13:32 2019-10-18 Show GitHub Exploit DB Packet Storm
222143 7.8 HIGH
Local
gnu guix GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-18192 2024-11-21 13:32 2019-10-18 Show GitHub Exploit DB Packet Storm
222144 9.1 CRITICAL
Network
eclipse
redhat
openj9
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_eus
enterprise_linux
satellite
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks. CWE-269
 Improper Privilege Management
CVE-2019-17631 2024-11-21 13:32 2019-10-18 Show GitHub Exploit DB Packet Storm
222145 8.8 HIGH
Network
metinfo metinfo app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSa… CWE-352
 Origin Validation Error
CVE-2019-17676 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
222146 8.8 HIGH
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF. CWE-352
CWE-843
 Origin Validation Error
Type Confusion
CVE-2019-17675 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
222147 5.4 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer. CWE-79
Cross-site Scripting
CVE-2019-17674 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
222148 7.5 HIGH
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header. NVD-CWE-noinfo
CVE-2019-17673 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
222149 6.1 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements. CWE-79
Cross-site Scripting
CVE-2019-17672 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
222150 5.3 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. CWE-200
Information Exposure
CVE-2019-17671 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm