Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253871	4.3	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0069	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

253872	5	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0078	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

253873	5	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0074	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

253874	5	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0068	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

253875	4.3	警告	オラクル	-	Oracle Application Server の J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0070	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

253876	5	警告	オラクル	-	Oracle Application Server の J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0067	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

253877	5	警告	オラクル	-	Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0066	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

253878	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1385	2010-02-15 11:03	2009-06-4	Show	GitHub Exploit DB Packet Storm

253879	4.6	警告	サイバートラスト株式会社 Todd C. Miller	-	sudo の Perl スクリプト実行時における権限昇格の脆弱性	-	CVE-2005-4158	2010-02-15 11:03	2005-11-8	Show	GitHub Exploit DB Packet Storm

253880	1	注意	オラクル	-	Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3412	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224121	5.4	MEDIUM Network	teampass	teampass	An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload.	CWE-79 Cross-site Scripting	CVE-2019-12950	2024-11-21 13:23	2019-08-7	Show	GitHub Exploit DB Packet Storm

224122	9.8	CRITICAL Network	elmelectronics	elm27_firmware	A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle.	CWE-798 Use of Hard-coded Credentials	CVE-2019-12797	2024-11-21 13:23	2019-08-1	Show	GitHub Exploit DB Packet Storm

224123	7.8	HIGH Local	symantec	endpoint_protection	Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be susceptible to a privilege es…	CWE-125 Out-of-bounds Read	CVE-2019-12750	2024-11-21 13:23	2019-08-1	Show	GitHub Exploit DB Packet Storm

224124	8.3	HIGH Network	polycom	unified_communications_software united_communications_software	A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote…	CWE-749 Exposed Dangerous Method or Function	CVE-2019-12948	2024-11-21 13:23	2019-07-30	Show	GitHub Exploit DB Packet Storm

224125	5.3	MEDIUM Network	humhub	social_network_kit	HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the…	CWE-203 Information Exposure Through Discrepancy	CVE-2019-12743	2024-11-21 13:23	2019-07-30	Show	GitHub Exploit DB Packet Storm

224126	5.5	MEDIUM Local	sweetscape	010_editor	In SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could allow an attacker to cause a denial of service.	CWE-190 Integer Overflow or Wraparound	CVE-2019-12552	2024-11-21 13:23	2019-07-23	Show	GitHub Exploit DB Packet Storm

224127	5.5	MEDIUM Local	sweetscape	010_editor	In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function (provided by the scripting engine) allows an attacker to overwrite arbitrary mem…	CWE-787 Out-of-bounds Write	CVE-2019-12551	2024-11-21 13:23	2019-07-23	Show	GitHub Exploit DB Packet Storm

224128	8.8	HIGH Network	wp-code-highlightjs_project	wp-code-highlightjs	An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?page=wp-code-highlight-js allows CSRF, as demonstrated by an XSS payload in the hlj…	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2019-12934	2024-11-21 13:23	2019-07-20	Show	GitHub Exploit DB Packet Storm

224129	9.8	CRITICAL Network	proftpd fedoraproject debian siemens	proftpd fedora debian_linux simatic_cp_1543-1_firmware	An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-12815	2024-11-21 13:23	2019-07-20	Show	GitHub Exploit DB Packet Storm

224130	9.8	CRITICAL Network	zeroshell	zeroshell	Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exp…	CWE-78 OS Command	CVE-2019-12725	2024-11-21 13:23	2019-07-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed