Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253011 - - Invensys - Wonderware Archestra ConfigurationAccessComponent ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - - 2010-08-30 19:01 2010-08-5 Show GitHub Exploit DB Packet Storm
253012 7.8 危険 シスコシステムズ - 複数の Cisco 製品の IKE におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2817 2010-08-27 16:04 2010-08-4 Show GitHub Exploit DB Packet Storm
253013 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances の SIP 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2816 2010-08-27 16:04 2010-08-4 Show GitHub Exploit DB Packet Storm
253014 7.8 危険 シスコシステムズ - 複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2815 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
253015 7.8 危険 シスコシステムズ - 複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2814 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
253016 7.8 危険 シスコシステムズ - 複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1581 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
253017 7.8 危険 シスコシステムズ - 複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1580 2010-08-27 16:03 2010-08-4 Show GitHub Exploit DB Packet Storm
253018 7.8 危険 シスコシステムズ - 複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1579 2010-08-27 16:02 2010-08-4 Show GitHub Exploit DB Packet Storm
253019 7.8 危険 シスコシステムズ - 複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1578 2010-08-27 16:02 2010-08-4 Show GitHub Exploit DB Packet Storm
253020 5.8 警告 ブルーコートシステムズ - Blue Coat ProxySG の HTTP Host ヘッダにおけるアクセスコントロール回避の脆弱性 CWE-16
環境設定 		CVE-2009-1211 2010-08-27 16:02 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223021 6.1 MEDIUM
Network 		otcms otcms OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request. CWE-79
Cross-site Scripting 		CVE-2019-13971 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223022 6.1 MEDIUM
Network 		antsword_project antsword In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/dat… CWE-79
Cross-site Scripting 		CVE-2019-13970 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223023 8.8 HIGH
Network 		metinfo metinfo Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1 request. CWE-89
SQL Injection 		CVE-2019-13969 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223024 9.8 CRITICAL
Network 		videolan
opensuse
debian
canonical 		vlc_media_player
leap
backports_sle
debian_linux
ubuntu_linux 		lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height. CWE-125
Out-of-bounds Read 		CVE-2019-13962 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223025 8.8 HIGH
Network 		flatcore flatcore A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php. CWE-352
 Origin Validation Error 		CVE-2019-13961 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223026 5.5 MEDIUM
Local 		libjpeg-turbo libjpeg-turbo In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor'… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-13960 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223027 6.5 MEDIUM
Network 		axiosys bento4 In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186. CWE-476
 NULL Pointer Dereference 		CVE-2019-13959 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223028 9.8 CRITICAL
Network 		codersclub discuz\!ml Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'… CWE-94
Code Injection 		CVE-2019-13956 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223029 9.8 CRITICAL
Network 		gdnsd gdnsd The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data. CWE-787
 Out-of-bounds Write 		CVE-2019-13952 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223030 9.8 CRITICAL
Network 		gdnsd gdnsd The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data. CWE-787
 Out-of-bounds Write 		CVE-2019-13951 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm