Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253161	9.3	危険	アップルレッドハット	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1812	2011-02-4 14:29	2010-09-8	Show	GitHub Exploit DB Packet Storm

253162	9.3	危険	アップル Google レッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1780	2011-02-4 14:28	2010-07-30	Show	GitHub Exploit DB Packet Storm

253163	5.8	警告	アップルレッドハット	-	Apple Safari の WebKit における DNS 先読み設定を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3813	2011-02-4 14:26	2010-11-22	Show	GitHub Exploit DB Packet Storm

253164	9.3	危険	アップルレッドハット	-	Apple Safari の WebKit における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3812	2011-02-4 14:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

253165	7.5	危険	Objectivity	-	Objectivity/DB 管理用ツールに認証不備の問題	CWE-287 不適切な認証	CVE-2011-0489	2011-02-4 14:16	2011-01-14	Show	GitHub Exploit DB Packet Storm

253166	6.8	警告	ICQ	-	ICQ 7のアップデートに検証不備の問題	CWE-94 コード・インジェクション	CVE-2011-0487	2011-02-4 14:14	2011-01-14	Show	GitHub Exploit DB Packet Storm

253167	-	-	Google	-	Google Chrome における複数の脆弱性	-	-	2011-02-4 14:11	2011-01-14	Show	GitHub Exploit DB Packet Storm

253168	5	警告	Wireshark	-	Wireshark の ASN.1 BER 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0445	2011-02-4 14:09	2011-01-11	Show	GitHub Exploit DB Packet Storm

253169	6.9	警告	サイバートラスト株式会社 Python Software Foundation レッドハット	-	Python の PySys_SetArgv API 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2008-5983	2011-02-4 13:58	2009-04-14	Show	GitHub Exploit DB Packet Storm

253170	2.6	注意	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2322	2011-02-3 14:55	2010-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224651	6.5	MEDIUM Network	libav	libav	An issue was discovered in Libav 12.3. There is an infinite loop in the function mov_probe in the file libavformat/mov.c, related to offset and tag.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-14371	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224652	6.5	MEDIUM Network	exiv2 debian	exiv2 debian_linux	In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp. It could result in denial of service.	CWE-125 Out-of-bounds Read	CVE-2019-14370	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224653	6.5	MEDIUM Network	exiv2 debian	exiv2 debian_linux	Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file.	CWE-125 Out-of-bounds Read	CVE-2019-14369	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224654	7.8	HIGH Local	exiv2	exiv2	Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.	CWE-125 Out-of-bounds Read	CVE-2019-14368	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224655	6.1	MEDIUM Network	icegram	email_subscribers_\&_newsletters	An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publicly available subscription form using th…	CWE-79 Cross-site Scripting	CVE-2019-14364	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224656	9.8	CRITICAL Network	netgear	wndr3400v3_firmware	A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.18_1.0.63 allows an attacker to remotely execute arbitrary code via a crafted UPnP …	CWE-787 Out-of-bounds Write	CVE-2019-14363	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224657	5.4	MEDIUM Network	openbravo	openbravo_erp	Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNew…	CWE-22 Path Traversal	CVE-2019-14362	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224658	7.8	HIGH Local	joget	worfklow	In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account_new with the Account ID or Account Name…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-14352	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224659	8.8	HIGH Network	espocrm	espocrm	EspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker can brute-force a user password hash by 1 symbol at a time using specially crafted api/v1/User?filter…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-14351	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224660	6.1	MEDIUM Network	espocrm	espocrm	EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/Kn…	CWE-79 Cross-site Scripting	CVE-2019-14350	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed