Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253131	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0081	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253132	4.3	警告	オラクル	-	Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0835	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253133	6.4	警告	オラクル	-	Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2375	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253134	9.3	危険	マイクロソフト	-	Microsoft Office Outlook における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0266	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253135	9.3	危険	マイクロソフト	-	Microsoft Office Access の FieldList の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1881	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

253136	9.3	危険	マイクロソフト	-	Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0814	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

253137	2.1	注意	日立 CA Technologies	-	Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2157	2010-07-29 18:57	2010-06-3	Show	GitHub Exploit DB Packet Storm

253138	3.5	注意	ターボリナックス Samba Project	-	Samba の smbd におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0926	2010-07-29 18:57	2010-02-24	Show	GitHub Exploit DB Packet Storm

253139	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2597	2010-07-28 19:31	2010-07-2	Show	GitHub Exploit DB Packet Storm

253140	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の TIFFRGBAImageGet 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-2483	2010-07-28 19:31	2010-07-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223491	6.5	MEDIUM Network	alpinelinux	abuild	Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.	CWE-668 CWE-862 Exposure of Resource to Wrong Sphere Missing Authorization	CVE-2019-12875	2024-11-21 13:23	2019-06-19	Show	GitHub Exploit DB Packet Storm

223492	9.8	CRITICAL Network	videolan	vlc_media_player	An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a dou…	CWE-415 Double Free	CVE-2019-12874	2024-11-21 13:23	2019-06-19	Show	GitHub Exploit DB Packet Storm

223493	7.2	HIGH Network	dotcms	dotcms	dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.	CWE-89 SQL Injection	CVE-2019-12872	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

223494	6.1	MEDIUM Network	craftcms	craft_cms	Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.	CWE-79 Cross-site Scripting	CVE-2019-12823	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

223495	7.2	HIGH Network	misp	misp	app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deser…	CWE-502 Deserialization of Untrusted Data	CVE-2019-12868	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

223496	5.5	MEDIUM Local	radare	radare2	In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.	CWE-415 Double Free	CVE-2019-12865	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

223497	6.1	MEDIUM Network	seeddms	seeddms	out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name.	CWE-79 Cross-site Scripting	CVE-2019-12801	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

223498	9.8	CRITICAL Network	wago	852-303_firmware 852-1305_firmware 852-1505_firmware	WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to login via SSH and TELNET.	CWE-798 Use of Hard-coded Credentials	CVE-2019-12550	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

223499	9.8	CRITICAL Network	wago	852-303_firmware 852-1305_firmware 852-1505_firmware	WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon. The fingerprint of the SSH host key from the corresponding SSH daem…	CWE-798 Use of Hard-coded Credentials	CVE-2019-12549	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

223500	6.8	MEDIUM Physics	actiontec	t2200h_firmware	An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key seq…	NVD-CWE-noinfo	CVE-2019-12789	2024-11-21 13:23	2019-06-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed