Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252761 7.8 危険 シスコシステムズ - 複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1580 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
252762 7.8 危険 シスコシステムズ - 複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1579 2010-08-27 16:02 2010-08-4 Show GitHub Exploit DB Packet Storm
252763 7.8 危険 シスコシステムズ - 複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1578 2010-08-27 16:02 2010-08-4 Show GitHub Exploit DB Packet Storm
252764 5.8 警告 ブルーコートシステムズ - Blue Coat ProxySG の HTTP Host ヘッダにおけるアクセスコントロール回避の脆弱性 CWE-16
環境設定 		CVE-2009-1211 2010-08-27 16:02 2009-03-2 Show GitHub Exploit DB Packet Storm
252765 - - ウインドリバー株式会社 - Wind River Systems VxWorks の認証 API (loginLib) における問題 - - 2010-08-26 16:57 2010-08-3 Show GitHub Exploit DB Packet Storm
252766 - - ウインドリバー株式会社 - Wind River Systems VxWorks においてデバッグサービスがデフォルトで有効になっている問題 - - 2010-08-26 16:57 2010-08-3 Show GitHub Exploit DB Packet Storm
252767 7.5 危険 サイバートラスト株式会社
レッドハット
Alexander V. Lukyanov		 - LFTP の get1 コマンドにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2251 2010-08-26 16:57 2010-07-6 Show GitHub Exploit DB Packet Storm
252768 5 警告 日立 - JP1/Integrated Manager および JP1/Integrated Management 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:56 2010-07-30 Show GitHub Exploit DB Packet Storm
252769 5 警告 日立 - JP1/PAM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:56 2010-07-30 Show GitHub Exploit DB Packet Storm
252770 5 警告 日立 - JP1/AJS の組み込みDB利用製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:55 2010-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212161 5.4 MEDIUM
Network 		o-dyn collabtive Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter. CWE-79
Cross-site Scripting 		CVE-2019-8935 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212162 8.8 HIGH
Network 		dedecms dedecms In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8933 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212163 7.5 HIGH
Network 		seafile seadroid The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making … CWE-330
 Use of Insufficiently Random Values 		CVE-2019-8919 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212164 9.8 CRITICAL
Network 		solarwinds orion_network_performance_monitor SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unau… NVD-CWE-noinfo
CVE-2019-8917 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212165 7.8 HIGH
Local 		linux
redhat
canonical
opensuse 		linux_kernel
enterprise_linux
ubuntu_linux
leap 		In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr. CWE-416
 Use After Free 		CVE-2019-8912 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212166 6.1 MEDIUM
Network 		wtcms_project wtcms An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code). CWE-79
Cross-site Scripting 		CVE-2019-8911 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212167 8.8 HIGH
Network 		wtcms_project wtcms An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF. CWE-352
 Origin Validation Error 		CVE-2019-8910 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212168 7.5 HIGH
Network 		wtcms_project wtcms An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image. CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-8909 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212169 9.8 CRITICAL
Network 		wtcms_project wtcms An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading … CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2019-8908 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm
212170 8.8 HIGH
Network 		file_project
debian
opensuse
canonical 		file
debian_linux
leap
ubuntu_linux 		do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact. CWE-787
 Out-of-bounds Write 		CVE-2019-8907 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm