Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253371 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0768 2010-05-27 17:25 2010-04-1 Show GitHub Exploit DB Packet Storm
253372 4 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0770 2010-05-27 17:25 2010-04-1 Show GitHub Exploit DB Packet Storm
253373 5 警告 IBM - IBM WebSphere Application Server (WAS) の Administrative Console コンポーネントにおける WAS セッションの内容を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-1898 2010-05-27 17:24 2009-06-3 Show GitHub Exploit DB Packet Storm
253374 6.8 警告 サイバートラスト株式会社
レッドハット		 - TeX Live 2009 および teTeX の dvipsk/dospecial.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1440 2010-05-26 16:33 2010-05-6 Show GitHub Exploit DB Packet Storm
253375 6.8 警告 サイバートラスト株式会社
レッドハット		 - TeX Live および teTeX の predospecial 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0739 2010-05-26 16:32 2010-04-16 Show GitHub Exploit DB Packet Storm
253376 9.3 危険 アドビシステムズ - Adobe Photoshop CS4 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1279 2010-05-26 16:32 2010-04-30 Show GitHub Exploit DB Packet Storm
253377 9.3 危険 レッドハット
freedesktop.org
サイバートラスト株式会社
Glyph & Cog, LLC		 - Xpdf および Poppler の ObjectStream::ObjectStream 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3608 2010-05-26 16:31 2009-10-15 Show GitHub Exploit DB Packet Storm
253378 6.8 警告 サイバートラスト株式会社
レッドハット
CUPS		 - CUPS の pdftops フィルタにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0791 2010-05-26 16:30 2009-06-3 Show GitHub Exploit DB Packet Storm
253379 6.8 警告 レッドハット
Glyph & Cog, LLC
サイバートラスト株式会社
CUPS		 - Xpdf および CUPS におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0195 2010-05-26 16:30 2009-04-16 Show GitHub Exploit DB Packet Storm
253380 4.3 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット		 - JBIG2 MMR デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1183 2010-05-26 16:30 2009-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223731 7.5 HIGH
Network 		squid-cache
debian
fedoraproject
canonical
opensuse 		squid
debian_linux
fedora
ubuntu_linux
leap 		Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpecte… NVD-CWE-noinfo
CVE-2019-12854 2024-11-21 13:23 2019-08-16 Show GitHub Exploit DB Packet Storm
223732 7.8 HIGH
Local 		estsoft altools ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-12808 2024-11-21 13:23 2019-08-14 Show GitHub Exploit DB Packet Storm
223733 7.8 HIGH
Local 		estsoft alzip Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format. By persuading a victim … CWE-787
 Out-of-bounds Write 		CVE-2019-12807 2024-11-21 13:23 2019-08-14 Show GitHub Exploit DB Packet Storm
223734 8.8 HIGH
Network 		crosscert unisign UniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which can overwrite the stack with arbitrary data, due to a buffer overflow in a library. That leads remote at… CWE-787
 Out-of-bounds Write 		CVE-2019-12806 2024-11-21 13:23 2019-08-14 Show GitHub Exploit DB Packet Storm
223735 9.8 CRITICAL
Network 		hashicorp nomad HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver. CWE-269
 Improper Privilege Management 		CVE-2019-12618 2024-11-21 13:23 2019-08-13 Show GitHub Exploit DB Packet Storm
223736 8.8 HIGH
Network 		ncsoft nc_launcher2 NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction i… CWE-77
Command Injection 		CVE-2019-12805 2024-11-21 13:23 2019-08-10 Show GitHub Exploit DB Packet Storm
223737 9.1 CRITICAL
Network 		zohocorp manageengine_assetexplorer Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-12994 2024-11-21 13:23 2019-08-9 Show GitHub Exploit DB Packet Storm
223738 8.8 HIGH
Network 		zohocorp manageengine_assetexplorer Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-12959 2024-11-21 13:23 2019-08-9 Show GitHub Exploit DB Packet Storm
223739 5.4 MEDIUM
Network 		teampass teampass An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload. CWE-79
Cross-site Scripting 		CVE-2019-12950 2024-11-21 13:23 2019-08-7 Show GitHub Exploit DB Packet Storm
223740 9.8 CRITICAL
Network 		elmelectronics elm27_firmware A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-12797 2024-11-21 13:23 2019-08-1 Show GitHub Exploit DB Packet Storm