Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253321 10 危険 日立
CA Technologies		 - CA XOsoft におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1223 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
253322 5 警告 日立
CA Technologies		 - CA XOsoft における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-1222 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
253323 5 警告 日立
CA Technologies		 - CA XOsoft におけるユーザ名を列挙される脆弱性 CWE-287
不適切な認証 		CVE-2010-1221 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
253324 6.8 警告 フェンリル株式会社 - ActiveGeckoBrowser における複数の脆弱性 CWE-Other
その他 		CVE-2010-2420 2010-06-14 12:01 2010-06-14 Show GitHub Exploit DB Packet Storm
253325 6.8 警告 サン・マイクロシステムズ
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット		 - GNU tar および GNU cpio の rmt_read__ 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0624 2010-06-11 18:45 2010-03-15 Show GitHub Exploit DB Packet Storm
253326 3.5 注意 PostgreSQL.org
サイバートラスト株式会社
レッドハット		 - PostgreSQL における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0733 2010-06-9 16:54 2010-03-19 Show GitHub Exploit DB Packet Storm
253327 6.5 警告 PostgreSQL.org
サイバートラスト株式会社
レッドハット		 - PostgreSQL の bitsubstr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-0442 2010-06-9 16:54 2010-02-2 Show GitHub Exploit DB Packet Storm
253328 6.8 警告 アップル - Java の window drawing 実装における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2010-0539 2010-06-7 17:58 2010-05-18 Show GitHub Exploit DB Packet Storm
253329 6.8 警告 アップル - Apple Mac OS X 上で稼働する Java における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0538 2010-06-7 17:58 2010-05-18 Show GitHub Exploit DB Packet Storm
253330 6.5 警告 PostgreSQL.org
サイバートラスト株式会社
ターボリナックス
サン・マイクロシステムズ
レッドハット		 - PostgreSQL におけるインデックスの処理に関する権限を取得される脆弱性 CWE-Other
その他 		CVE-2009-4136 2010-06-7 16:48 2009-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214401 9.8 CRITICAL
Network 		qnap photo_station This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest vers… CWE-22
Path Traversal 		CVE-2019-7195 2024-11-21 13:47 2019-12-6 Show GitHub Exploit DB Packet Storm
214402 9.8 CRITICAL
Network 		qnap photo_station This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest vers… CWE-22
Path Traversal 		CVE-2019-7194 2024-11-21 13:47 2019-12-6 Show GitHub Exploit DB Packet Storm
214403 9.8 CRITICAL
Network 		qnap qts This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. CWE-20
 Improper Input Validation  		CVE-2019-7193 2024-11-21 13:47 2019-12-6 Show GitHub Exploit DB Packet Storm
214404 9.8 CRITICAL
Network 		qnap photo_station This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versi… CWE-863
 Incorrect Authorization 		CVE-2019-7192 2024-11-21 13:47 2019-12-6 Show GitHub Exploit DB Packet Storm
214405 4.8 MEDIUM
Network 		qnap music_station This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recomme… CWE-79
Cross-site Scripting 		CVE-2019-7185 2024-11-21 13:47 2019-12-6 Show GitHub Exploit DB Packet Storm
214406 4.8 MEDIUM
Network 		qnap video_station This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recomme… CWE-79
Cross-site Scripting 		CVE-2019-7184 2024-11-21 13:47 2019-12-6 Show GitHub Exploit DB Packet Storm
214407 9.8 CRITICAL
Network 		qnap qts This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions. CWE-59
Link Following 		CVE-2019-7183 2024-11-21 13:47 2019-12-6 Show GitHub Exploit DB Packet Storm
214408 7.8 HIGH
Local 		qnap netbak_replicator An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute a… CWE-428
 Unquoted Search Path or Element 		CVE-2019-7201 2024-11-21 13:47 2019-12-5 Show GitHub Exploit DB Packet Storm
214409 4.8 MEDIUM
Network 		qnap qts A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the adm… CWE-79
Cross-site Scripting 		CVE-2019-7197 2024-11-21 13:47 2019-12-5 Show GitHub Exploit DB Packet Storm
214410 6.1 MEDIUM
Network 		schneider-electric andover_continuum_9680_firmware
andover_continuum_5740_firmware
andover_continuum_5720_firmware
andover_continuum_bcx4040_firmware
andover_continuum_bcx9640_firmware
andover_continuum_… 		A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful … CWE-79
Cross-site Scripting 		CVE-2019-6853 2024-11-21 13:47 2019-11-21 Show GitHub Exploit DB Packet Storm