Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253281	4.3	警告	アップル	-	Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0531	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

253282	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

253283	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

253284	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

253285	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

253286	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

253287	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

253288	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

253289	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

253290	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223151	5.3	MEDIUM Network	torproject	tor_browser	Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language…	CWE-200 Information Exposure	CVE-2019-13075	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223152	5.4	MEDIUM Network	zoneminder	zoneminder	Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.	CWE-79 Cross-site Scripting	CVE-2019-13072	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223153	5.4	MEDIUM Network	grafana	grafana	public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).	CWE-79 Cross-site Scripting	CVE-2019-13068	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223154	9.8	CRITICAL Network	f5	njs	njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place.	CWE-125 Out-of-bounds Read	CVE-2019-13067	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223155	6.5	MEDIUM Adjacent	logitech	unifying_receiver_firmware k360_firmware	Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a…	CWE-200 Information Exposure	CVE-2019-13055	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223156	6.5	MEDIUM Adjacent	logitech	r500_firmware	The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restrict…	CWE-522 Insufficiently Protected Credentials	CVE-2019-13054	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223157	6.5	MEDIUM Adjacent	logitech	unifying_receiver_firmware	Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOT…	NVD-CWE-noinfo	CVE-2019-13053	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223158	6.5	MEDIUM Adjacent	logitech	unifying_receiver_firmware	Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-13052	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223159	7.5	HIGH Network	gnupg sks_keyserver_project fedoraproject opensuse f5	gnupg sks_keyserver fedora leap traffix_signaling_delivery_controller	Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the…	CWE-295 Improper Certificate Validation	CVE-2019-13050	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223160	7.8	HIGH Local	toaruos_project	toaruos	An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leading to escalation of privileges.	CWE-190 Integer Overflow or Wraparound	CVE-2019-13049	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed