Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253301	9.3	危険	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3956	2011-01-13 16:19	2010-12-14	Show	GitHub Exploit DB Packet Storm

253302	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3346	2011-01-13 16:15	2010-12-14	Show	GitHub Exploit DB Packet Storm

253303	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3345	2011-01-13 16:11	2010-12-14	Show	GitHub Exploit DB Packet Storm

253304	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3343	2011-01-13 15:48	2010-12-14	Show	GitHub Exploit DB Packet Storm

253305	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3340	2011-01-13 15:43	2010-12-14	Show	GitHub Exploit DB Packet Storm

253306	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Advanced Audio Coding におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4395	2011-01-12 15:29	2010-12-10	Show	GitHub Exploit DB Packet Storm

253307	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の RealPix におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4394	2011-01-12 15:23	2010-12-10	Show	GitHub Exploit DB Packet Storm

253308	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer の ImageMap におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4392	2011-01-12 15:21	2010-12-10	Show	GitHub Exploit DB Packet Storm

253309	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の RMX ヘッダーにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4391	2011-01-12 15:18	2010-12-10	Show	GitHub Exploit DB Packet Storm

253310	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の IVR ファイルヘッダーにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4390	2011-01-12 15:17	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224631	7.8	HIGH Local	intel	nuc_8_mainstream_game_kit_firmware nuc_8_mainstream_game_mini_computer_firmware nuc8i7bek_firmware cd1p64gk_firmware nuc8i3cysm_firmware nuc8i7hnk_firmware nuc7i7dnke_firmware nu…	Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-14608	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

224632	7.8	HIGH Local	intel	setup_and_configuration_software_platform_discovery_utility	Improper permissions in the installer for the Intel(R) SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack.	CWE-276 Incorrect Default Permissions	CVE-2019-14605	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

224633	5.5	MEDIUM Local	intel	quartus_prime	Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable denial of service via local acce…	CWE-476 NULL Pointer Dereference	CVE-2019-14604	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

224634	7.8	HIGH Local	intel	quartus_prime	Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of pri…	CWE-276 Incorrect Default Permissions	CVE-2019-14603	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

224635	7.8	HIGH Local	intel	control_center-i	Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-426 Untrusted Search Path	CVE-2019-14599	2024-11-21 13:27	2019-12-17	Show	GitHub Exploit DB Packet Storm

224636	5.4	MEDIUM Network	redhat	3scale	A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain acce…	-	CVE-2019-14849	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

224637	4.3	MEDIUM Network	atlassian	crucible fisheye	The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attackers to remove another user's favourite setting for a project via an improper au…	NVD-CWE-noinfo	CVE-2019-15009	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

224638	6.1	MEDIUM Network	atlassian	crucible fisheye	The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulne…	CWE-79 Cross-site Scripting	CVE-2019-15008	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

224639	4.8	MEDIUM Network	atlassian	crucible fisheye	The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the na…	CWE-79 Cross-site Scripting	CVE-2019-15007	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm

224640	7.4	HIGH Adjacent	freebsd linux openbsd apple	freebsd linux_kernel openbsd mac_os_x tvos iphone_os ipados macos	A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make pos…	-	CVE-2019-14899	2024-11-21 13:27	2019-12-12	Show	GitHub Exploit DB Packet Storm