Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253941	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-3389	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

253942	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3388	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

253943	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3982	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

253944	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3981	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

253945	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3980	2010-01-28 12:15	2009-12-15	Show	GitHub Exploit DB Packet Storm

253946	10	危険	アドビシステムズ	-	Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3792	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

253947	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3791	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

253948	5.8	警告	PostgreSQL.org ターボリナックスサン・マイクロシステムズ	-	PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4034	2010-01-26 11:48	2009-12-15	Show	GitHub Exploit DB Packet Storm

253949	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4031	2010-01-26 11:47	2009-11-29	Show	GitHub Exploit DB Packet Storm

253950	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3613	2010-01-26 11:38	2009-10-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223451	7.8	HIGH Local	xnview	xnview	XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.	CWE-787 Out-of-bounds Write	CVE-2019-13083	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223452	9.8	CRITICAL Network	chamilo	chamilo_lms	Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It extracts a ZIP archive before checking its content, and once it has been extra…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-13082	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223453	5.3	MEDIUM Network	torproject	tor_browser	Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language…	CWE-200 Information Exposure	CVE-2019-13075	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223454	5.4	MEDIUM Network	zoneminder	zoneminder	Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.	CWE-79 Cross-site Scripting	CVE-2019-13072	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223455	5.4	MEDIUM Network	grafana	grafana	public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).	CWE-79 Cross-site Scripting	CVE-2019-13068	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223456	9.8	CRITICAL Network	f5	njs	njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place.	CWE-125 Out-of-bounds Read	CVE-2019-13067	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223457	6.5	MEDIUM Adjacent	logitech	unifying_receiver_firmware k360_firmware	Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a…	CWE-200 Information Exposure	CVE-2019-13055	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223458	6.5	MEDIUM Adjacent	logitech	r500_firmware	The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restrict…	CWE-522 Insufficiently Protected Credentials	CVE-2019-13054	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223459	6.5	MEDIUM Adjacent	logitech	unifying_receiver_firmware	Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOT…	NVD-CWE-noinfo	CVE-2019-13053	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

223460	6.5	MEDIUM Adjacent	logitech	unifying_receiver_firmware	Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-13052	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed