Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253031	4.6	警告	レッドハット	-	LVM2 のクラスタ論理ボリュームマネージャデーモンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2010-2526	2010-08-24 18:42	2010-07-28	Show	GitHub Exploit DB Packet Storm

253032	9.3	危険	シマンテック IBM	-	Autonomy KeyView の WordPerfect 5.x reader (wosr.dll) におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0135	2010-08-24 18:42	2010-08-4	Show	GitHub Exploit DB Packet Storm

253033	9.3	危険	シマンテック IBM	-	Autonomy KeyView の library におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0126	2010-08-24 18:41	2010-08-4	Show	GitHub Exploit DB Packet Storm

253034	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1524	2010-08-24 18:41	2010-08-4	Show	GitHub Exploit DB Packet Storm

253035	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-1525	2010-08-24 18:41	2010-08-4	Show	GitHub Exploit DB Packet Storm

253036	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0133	2010-08-24 18:40	2010-08-4	Show	GitHub Exploit DB Packet Storm

253037	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0131	2010-08-24 18:40	2010-08-4	Show	GitHub Exploit DB Packet Storm

253038	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	x86_64 プラットフォーム上で稼動する RHEL の LibTIFF におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2598	2010-08-24 13:44	2010-07-8	Show	GitHub Exploit DB Packet Storm

253039	6.8	警告	アップルサイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1411	2010-08-24 13:44	2010-06-10	Show	GitHub Exploit DB Packet Storm

253040	2.6	注意	アップル	-	Apple Safari の AutoFill 機能におけるアドレスブックカードの情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1796	2010-08-20 18:24	2010-07-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222351	9.8	CRITICAL Network	optiontree_project	optiontree	The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.	CWE-502 Deserialization of Untrusted Data	CVE-2019-15320	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222352	9.8	CRITICAL Network	optiontree_project	optiontree	The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.	CWE-502 Deserialization of Untrusted Data	CVE-2019-15319	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222353	9.8	CRITICAL Network	yikesinc	easy_forms_for_mailchimp	The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.	CWE-94 Code Injection	CVE-2019-15318	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222354	5.4	MEDIUM Network	givewp	givewp	The give plugin before 2.4.7 for WordPress has XSS via a donor name.	CWE-79 Cross-site Scripting	CVE-2019-15317	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222355	5.4	MEDIUM Network	tiki	tikiwiki_cms\/groupware	tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-download_file.php?display&fileId= URI.	CWE-79 Cross-site Scripting	CVE-2019-15314	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222356	7.0	HIGH Local	valvesoftware	steam_client	Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to le…	CWE-367 CWE-732 Time-of-check Time-of-use (TOCTOU) Race Condition Incorrect Permission Assignment for Critical Resource	CVE-2019-15316	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222357	7.8	HIGH Local	valvesoftware	steam_client	Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll wi…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-15315	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222358	5.4	MEDIUM Network	vanderbilt	redcap	REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.	CWE-79 Cross-site Scripting	CVE-2019-15127	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222359	9.6	CRITICAL Network	mantisbt	mantisbt	The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings permit it) after uploa…	CWE-79 Cross-site Scripting	CVE-2019-15074	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

222360	7.8	HIGH Local	bitdefender	antivirus_2020	An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to…	CWE-426 Untrusted Search Path	CVE-2019-15295	2024-11-21 13:28	2019-08-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed