Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253591	6.5	警告	アップル	-	Apple Mac OS X の iChat サーバにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0503	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

253592	4.3	警告	アップル	-	Apple Mac OS X の iChat サーバにおけるメッセージの監査を回避可能な脆弱性	CWE-DesignError	CVE-2010-0502	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

253593	5	警告	アップルレッドハット jabberd 2.x project	-	Jabber Studio jabberd の SASL ネゴシエーションにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-1329	2010-04-14 17:10	2006-03-21	Show	GitHub Exploit DB Packet Storm

253594	7.2	危険	アップル	-	Apple Mac OS X の FTP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0501	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

253595	7.5	危険	アップル	-	Apple Mac OS X の FreeRADIUS サーバにおけるネットワーク接続を確立される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0524	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

253596	7.8	危険	アップル	-	Apple Mac OS X の Event Monitor におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0500	2010-04-14 17:09	2010-03-29	Show	GitHub Exploit DB Packet Storm

253597	6.5	警告	アップル	-	Apple Mac OS X の Dovecot におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0535	2010-04-14 17:09	2010-03-29	Show	GitHub Exploit DB Packet Storm

253598	7.2	危険	アップル	-	Apple Mac OS X のディレクトリサービスにおける権限を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-0498	2010-04-14 17:09	2010-03-29	Show	GitHub Exploit DB Packet Storm

253599	6.8	警告	アップル	-	Apple Mac OS X のディスクイメージにおける任意のコードを実行される脆弱性	CWE-DesignError	CVE-2010-0497	2010-04-14 17:09	2010-03-29	Show	GitHub Exploit DB Packet Storm

253600	6.8	警告	アップル	-	Apple Mac OS X のディスクイメージにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0065	2010-04-13 15:18	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223421	8.8	HIGH Network	xpertsol	server_status_by_hostname\/ip	A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters.	CWE-89 SQL Injection	CVE-2019-12570	2024-11-21 13:23	2019-07-4	Show	GitHub Exploit DB Packet Storm

223422	9.8	CRITICAL Network	dosbox debian	dosbox debian_linux	DOSBox 0.74-2 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-12594	2024-11-21 13:23	2019-07-3	Show	GitHub Exploit DB Packet Storm

223423	8.8	HIGH Network	wpchef	widget_logic	A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets (that ar…	CWE-352 Origin Validation Error	CVE-2019-12826	2024-11-21 13:23	2019-07-2	Show	GitHub Exploit DB Packet Storm

223424	5.3	MEDIUM Network	djangoproject canonical debian	django ubuntu_linux debian_linux	An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT set…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-12781	2024-11-21 13:23	2019-07-1	Show	GitHub Exploit DB Packet Storm

223425	6.1	MEDIUM Network	squirrelmail	squirrelmail	XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious…	CWE-79 Cross-site Scripting	CVE-2019-12970	2024-11-21 13:23	2019-07-1	Show	GitHub Exploit DB Packet Storm

223426	6.1	MEDIUM Network	seeddms	seeddms	A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete search form placed in the header of out/out.Viewfolder.php.	CWE-79 Cross-site Scripting	CVE-2019-12932	2024-11-21 13:23	2019-06-29	Show	GitHub Exploit DB Packet Storm

223427	8.8	HIGH Network	icon	loopchain	In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment (aka injection in the DEFAULT_SCORE_HOST environment variable).	CWE-78 OS Command	CVE-2019-12997	2024-11-21 13:23	2019-06-28	Show	GitHub Exploit DB Packet Storm

223428	7.5	HIGH Network	istio	istio	Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwt_authenticator.cc segmentation fault.	CWE-476 NULL Pointer Dereference	CVE-2019-12995	2024-11-21 13:23	2019-06-28	Show	GitHub Exploit DB Packet Storm

223429	6.1	MEDIUM Network	zyxel	uag2100_firmware uag4100_firmware uag5100_firmware usg110_firmware usg210_firmware usg310_firmware usg1100_firmware usg1900_firmware usg2200-vpn_firmware	A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2019-12581	2024-11-21 13:23	2019-06-28	Show	GitHub Exploit DB Packet Storm

223430	8.1	HIGH Network	keyidentity	linotp	KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).	CWE-294 Authentication Bypass by Capture-replay	CVE-2019-12887	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed