Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253421	9.3	危険	アドビシステムズレッドハット	-	Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2889	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

253422	9.3	危険	アドビシステムズ	-	Windows 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2888	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

253423	9.3	危険	アドビシステムズレッドハット	-	Linux 上で稼働する Adobe Reader および Acrobat における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2887	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

253424	6.8	警告	pon software	-	Archive Decoder における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3160	2010-10-20 14:03	2010-10-20	Show	GitHub Exploit DB Packet Storm

253425	5.1	警告	pon software	-	Explzh における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3159	2010-10-20 14:02	2010-10-20	Show	GitHub Exploit DB Packet Storm

253426	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType のデモプログラムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2527	2010-10-19 15:22	2010-07-12	Show	GitHub Exploit DB Packet Storm

253427	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType の ftmulti.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2541	2010-10-19 15:20	2010-08-6	Show	GitHub Exploit DB Packet Storm

253428	7.5	危険	The PHP Group アップルターボリナックス	-	PHP の SplObjectStorage における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2225	2010-10-19 15:20	2010-06-24	Show	GitHub Exploit DB Packet Storm

253429	2.1	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP における同じ Web サーバ上でホストされた別サイトの振る舞いを変更される脆弱性	CWE-134 書式文字列の問題	CVE-2009-0754	2010-10-19 15:17	2009-03-3	Show	GitHub Exploit DB Packet Storm

253430	5	警告	The PHP Group アップルターボリナックスレッドハット	-	PHP の JSON_parser 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-1271	2010-10-19 15:16	2009-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222211	9.8	CRITICAL Network	openmpt	libopenmpt	In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API,…	CWE-120 Classic Buffer Overflow	CVE-2019-17113	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222212	6.1	MEDIUM Network	themeisle	visualizer	A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via t…	CWE-79 Cross-site Scripting	CVE-2019-16931	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222213	7.5	HIGH Network	nlnetlabs canonical	unbound ubuntu_linux	Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.	CWE-755 CWE-908 Improper Handling of Exceptional Conditions Use of Uninitialized Resource	CVE-2019-16866	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222214	7.8	HIGH Local	linuxmint	mintinstall	mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.	CWE-502 Deserialization of Untrusted Data	CVE-2019-17080	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222215	7.5	HIGH Network	linux	linux_kernel	An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack va…	NVD-CWE-noinfo	CVE-2019-17075	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222216	5.4	MEDIUM Network	xunruicms	xunruicms	An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.	CWE-79 Cross-site Scripting	CVE-2019-17074	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222217	6.5	MEDIUM Network	emlog	emlog	emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal.	CWE-22 Path Traversal	CVE-2019-17073	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222218	6.1	MEDIUM Network	eclipse oracle	mojarra mojarra_javaserver_faces retail_service_backbone retail_integration_bus retail_merchandising_system application_testing_suite secure_global_desktop retail_financial_integ…	faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client windo…	CWE-79 Cross-site Scripting	CVE-2019-17091	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222219	7.5	HIGH Network	putty opensuse netapp	putty leap oncommand_unified_manager_core_package	PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.	CWE-416 Use After Free	CVE-2019-17069	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222220	7.5	HIGH Network	putty opensuse	putty leap	PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.	CWE-74 Injection	CVE-2019-17068	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm