Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252821	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3266	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

252822	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3265	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

252823	5	警告	Opera Software ASA	-	Opera の X.509 証明書における SSLサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3044	2010-09-27 16:13	2009-09-1	Show	GitHub Exploit DB Packet Storm

252824	4.3	警告	Opera Software ASA	-	Opera における data: URI をブロックしない脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3013	2010-09-27 16:13	2009-08-31	Show	GitHub Exploit DB Packet Storm

252825	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2577	2010-09-27 16:12	2009-07-22	Show	GitHub Exploit DB Packet Storm

252826	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2540	2010-09-27 16:11	2009-07-20	Show	GitHub Exploit DB Packet Storm

252827	4.3	警告	Opera Software ASA	-	Opera における javascript: URI をブロックしない脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2351	2010-09-27 16:11	2009-07-7	Show	GitHub Exploit DB Packet Storm

252828	6.8	警告	Opera Software ASA	-	Opera における任意の https サイトになりすまされる脆弱性	CWE-287 不適切な認証	CVE-2009-2070	2010-09-27 16:11	2009-06-15	Show	GitHub Exploit DB Packet Storm

252829	6.8	警告	Opera Software ASA	-	Opera における任意の Web スクリプトを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2067	2010-09-27 16:10	2009-06-15	Show	GitHub Exploit DB Packet Storm

252830	6.8	警告	Opera Software ASA	-	Opera における任意の Web スクリプトを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2063	2010-09-27 16:10	2009-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222541	5.5	MEDIUM Local	intel	quartus_prime	Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable denial of service via local acce…	CWE-476 NULL Pointer Dereference	CVE-2019-14604	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

222542	7.8	HIGH Local	intel	quartus_prime	Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of pri…	CWE-276 Incorrect Default Permissions	CVE-2019-14603	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

222543	7.8	HIGH Local	intel	control_center-i	Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-426 Untrusted Search Path	CVE-2019-14599	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

222544	5.4	MEDIUM Network	redhat	3scale	A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain acce…	-	CVE-2019-14849	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

222545	4.3	MEDIUM Network	atlassian	crucible fisheye	The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attackers to remove another user's favourite setting for a project via an improper au…	NVD-CWE-noinfo	CVE-2019-15009	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

222546	6.1	MEDIUM Network	atlassian	crucible fisheye	The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulne…	CWE-79 Cross-site Scripting	CVE-2019-15008	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

222547	4.8	MEDIUM Network	atlassian	crucible fisheye	The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the na…	CWE-79 Cross-site Scripting	CVE-2019-15007	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

222548	7.4	HIGH Adjacent	freebsd linux openbsd apple	freebsd linux_kernel openbsd mac_os_x tvos iphone_os ipados macos	A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make pos…	-	CVE-2019-14899	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

222549	8.8	HIGH Network	libssh canonical opensuse fedoraproject debian oracle	libssh ubuntu_linux leap fedora debian_linux mysql_workbench	A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided…	CWE-78 OS Command	CVE-2019-14889	2024-11-21 13:27	2019-12-11	Show	GitHub Exploit DB Packet Storm

222550	5.4	MEDIUM Network	samba fedoraproject canonical debian opensuse	samba fedora ubuntu_linux debian_linux leap	All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clie…	CWE-287 Improper Authentication	CVE-2019-14870	2024-11-21 13:27	2019-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed