Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253281 9.3 危険 アドビシステムズ - Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-4086 2010-11-17 16:50 2010-10-28 Show GitHub Exploit DB Packet Storm
253282 9.3 危険 アドビシステムズ - Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-4085 2010-11-17 16:50 2010-10-28 Show GitHub Exploit DB Packet Storm
253283 9.3 危険 アドビシステムズ - Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-4084 2010-11-17 16:50 2010-10-28 Show GitHub Exploit DB Packet Storm
253284 9.3 危険 アドビシステムズ - Adobe Shockwave Player の dirapi.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3655 2010-11-17 16:49 2010-10-28 Show GitHub Exploit DB Packet Storm
253285 9.3 危険 アドビシステムズ - Adobe Shockwave Player の TextXtra.x32 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2582 2010-11-17 16:49 2010-10-28 Show GitHub Exploit DB Packet Storm
253286 9.3 危険 アドビシステムズ - Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2581 2010-11-17 16:48 2010-10-28 Show GitHub Exploit DB Packet Storm
253287 9.3 危険 アドビシステムズ - Adobe Shockwave Player に脆弱性 CWE-119
バッファエラー
CVE-2010-3653 2010-11-16 14:49 2010-10-25 Show GitHub Exploit DB Packet Storm
253288 7.5 危険 富士通 - Interstage Application Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6258 2010-11-16 14:48 2008-02-19 Show GitHub Exploit DB Packet Storm
253289 6.5 警告 アップル
サイバートラスト株式会社
MySQL AB
ターボリナックス
レッドハット
- MySQL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1848 2010-11-15 16:20 2010-05-5 Show GitHub Exploit DB Packet Storm
253290 5 警告 サイバートラスト株式会社
Zabbix
- Zabbix サーバの trapper/trapper.c 内にある process_trap 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-4500 2010-11-15 15:41 2009-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222201 5.4 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.3 allows XSS in post previews by authenticated users. CWE-79
Cross-site Scripting
CVE-2019-16223 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222202 6.1 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting
CVE-2019-16222 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222203 6.1 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.3 allows reflected XSS in the dashboard. CWE-79
Cross-site Scripting
CVE-2019-16221 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222204 6.1 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forwar… CWE-601
Open Redirect
CVE-2019-16220 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222205 6.1 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.3 allows XSS in shortcode previews. CWE-79
Cross-site Scripting
CVE-2019-16219 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222206 6.1 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.3 allows XSS in stored comments. CWE-79
Cross-site Scripting
CVE-2019-16218 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222207 6.1 MEDIUM
Network
wordpress
debian
wordpress
debian_linux
WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled. CWE-79
Cross-site Scripting
CVE-2019-16217 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222208 5.4 MEDIUM
Network
esri arcgis_enterprise In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature. CWE-79
Cross-site Scripting
CVE-2019-16193 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222209 5.7 MEDIUM
Network
libra libra_core Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character f… NVD-CWE-noinfo
CVE-2019-16214 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222210 7.5 HIGH
Network
humanica humatrix The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm t… CWE-276
Incorrect Default Permissions 
CVE-2019-16106 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm