Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253681	9.3	危険	アップル	-	Apple Safari における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0045	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

253682	4.3	警告	アップル	-	Apple Safari の PubSub における Cookie が設定される脆弱性	CWE-16 環境設定	CVE-2010-0044	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

253683	7.5	危険	サン・マイクロシステムズ GNU Project サイバートラスト株式会社レッドハット	-	GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4476	2010-03-25 11:47	2007-08-17	Show	GitHub Exploit DB Packet Storm

253684	7.8	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3282	2010-03-24 12:23	2009-10-1	Show	GitHub Exploit DB Packet Storm

253685	7.2	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3281	2010-03-24 12:22	2009-10-1	Show	GitHub Exploit DB Packet Storm

253686	9.3	危険	VMware	-	複数の VMware 製品の VMnc media コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2628	2010-03-24 12:22	2009-09-4	Show	GitHub Exploit DB Packet Storm

253687	9.3	危険	VMware	-	複数の VMware 製品の VMnc media コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0199	2010-03-24 12:22	2009-09-4	Show	GitHub Exploit DB Packet Storm

253688	5	警告	VMware	-	VMware Studio の Web インターフェースにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-2968	2010-03-24 12:22	2009-08-31	Show	GitHub Exploit DB Packet Storm

253689	4	警告	VMware	-	複数の VMware 製品の Descheduled Time Accounting ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-1805	2010-03-24 12:22	2009-05-28	Show	GitHub Exploit DB Packet Storm

253690	6.8	警告	VMware	-	複数の VMware 製品の仮想マシン表示機能における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-1244	2010-03-24 12:21	2009-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223421	8.8	HIGH Network	xpertsol	server_status_by_hostname\/ip	A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters.	CWE-89 SQL Injection	CVE-2019-12570	2024-11-21 13:23	2019-07-4	Show	GitHub Exploit DB Packet Storm

223422	9.8	CRITICAL Network	dosbox debian	dosbox debian_linux	DOSBox 0.74-2 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-12594	2024-11-21 13:23	2019-07-3	Show	GitHub Exploit DB Packet Storm

223423	8.8	HIGH Network	wpchef	widget_logic	A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets (that ar…	CWE-352 Origin Validation Error	CVE-2019-12826	2024-11-21 13:23	2019-07-2	Show	GitHub Exploit DB Packet Storm

223424	5.3	MEDIUM Network	djangoproject canonical debian	django ubuntu_linux debian_linux	An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT set…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-12781	2024-11-21 13:23	2019-07-1	Show	GitHub Exploit DB Packet Storm

223425	6.1	MEDIUM Network	squirrelmail	squirrelmail	XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious…	CWE-79 Cross-site Scripting	CVE-2019-12970	2024-11-21 13:23	2019-07-1	Show	GitHub Exploit DB Packet Storm

223426	6.1	MEDIUM Network	seeddms	seeddms	A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete search form placed in the header of out/out.Viewfolder.php.	CWE-79 Cross-site Scripting	CVE-2019-12932	2024-11-21 13:23	2019-06-29	Show	GitHub Exploit DB Packet Storm

223427	8.8	HIGH Network	icon	loopchain	In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment (aka injection in the DEFAULT_SCORE_HOST environment variable).	CWE-78 OS Command	CVE-2019-12997	2024-11-21 13:23	2019-06-28	Show	GitHub Exploit DB Packet Storm

223428	7.5	HIGH Network	istio	istio	Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwt_authenticator.cc segmentation fault.	CWE-476 NULL Pointer Dereference	CVE-2019-12995	2024-11-21 13:23	2019-06-28	Show	GitHub Exploit DB Packet Storm

223429	6.1	MEDIUM Network	zyxel	uag2100_firmware uag4100_firmware uag5100_firmware usg110_firmware usg210_firmware usg310_firmware usg1100_firmware usg1900_firmware usg2200-vpn_firmware	A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2019-12581	2024-11-21 13:23	2019-06-28	Show	GitHub Exploit DB Packet Storm

223430	8.1	HIGH Network	keyidentity	linotp	KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).	CWE-294 Authentication Bypass by Capture-replay	CVE-2019-12887	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed