Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253851	7.5	危険	サン・マイクロシステムズ GNOME Project レッドハット	-	Evolution Data Server (別名 evolution-data-server) における複数の整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0587	2010-05-14 18:37	2009-03-14	Show	GitHub Exploit DB Packet Storm

253852	5.8	警告	サン・マイクロシステムズ GNOME Project レッドハット	-	Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0582	2010-05-14 18:37	2009-03-14	Show	GitHub Exploit DB Packet Storm

253853	1.2	注意	日本電気サイバートラスト株式会社サン・マイクロシステムズターボリナックス OpenSSL Project レッドハット	-	RSA key reconstruction vulnerability	-	CVE-2007-3108	2010-05-14 18:37	2007-08-16	Show	GitHub Exploit DB Packet Storm

253854	5	警告	ヒューレット・パッカードサイバートラスト株式会社 OpenSSL Project ターボリナックスレッドハット	-	OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4355	2010-05-13 17:21	2010-01-13	Show	GitHub Exploit DB Packet Storm

253855	9.3	危険	日立	-	XMAP3 における任意のコードが実行される脆弱性	CWE-noinfo 情報不足	-	2010-05-13 15:14	2010-04-12	Show	GitHub Exploit DB Packet Storm

253856	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0863	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

253857	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

253858	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

253859	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

253860	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224221	7.8	HIGH Local	faststone	image_viewer	FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d.	CWE-787 Out-of-bounds Write	CVE-2019-13244	2024-11-21 13:24	2019-07-5	Show	GitHub Exploit DB Packet Storm

224222	7.8	HIGH Local	irfanview	irfanview	IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6.	CWE-787 Out-of-bounds Write	CVE-2019-13243	2024-11-21 13:24	2019-07-5	Show	GitHub Exploit DB Packet Storm

224223	7.8	HIGH Local	irfanview	irfanview	IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98.	CWE-787 Out-of-bounds Write	CVE-2019-13242	2024-11-21 13:24	2019-07-5	Show	GitHub Exploit DB Packet Storm

224224	7.8	HIGH Local	flightcrew_project canonical	flightcrew ubuntu_linux	FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.	CWE-22 Path Traversal	CVE-2019-13241	2024-11-21 13:24	2019-07-5	Show	GitHub Exploit DB Packet Storm

224225	6.1	MEDIUM Network	glpi-project	glpi	inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.	CWE-79 Cross-site Scripting	CVE-2019-13239	2024-11-21 13:24	2019-07-5	Show	GitHub Exploit DB Packet Storm

224226	7.5	HIGH Network	axiosys	bento4	An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse …	CWE-476 NULL Pointer Dereference	CVE-2019-13238	2024-11-21 13:24	2019-07-4	Show	GitHub Exploit DB Packet Storm

224227	7.0	HIGH Local	linux	linux_kernel	In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX boun…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2019-13233	2024-11-21 13:24	2019-07-4	Show	GitHub Exploit DB Packet Storm

224228	3.3	LOW Local	unzip_project debian	unzip debian_linux	Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue.	CWE-400 Uncontrolled Resource Consumption	CVE-2019-13232	2024-11-21 13:24	2019-07-4	Show	GitHub Exploit DB Packet Storm

224229	5.5	MEDIUM Local	deepin	deepin_clone	deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write a log file as root, and follows symlinks there. An unprivileged user can prepare…	CWE-59 Link Following	CVE-2019-13229	2024-11-21 13:24	2019-07-4	Show	GitHub Exploit DB Packet Storm

224230	4.7	MEDIUM Local	deepin	deepin-clone	deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and follows symlinks there. An unprivileged user can prepare a symlink attack ther…	CWE-59 Link Following	CVE-2019-13228	2024-11-21 13:24	2019-07-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed