Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253981	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-362 競合状態	CVE-2010-0489	2010-04-19 19:18	2010-03-30	Show	GitHub Exploit DB Packet Storm

253982	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0267	2010-04-19 19:18	2010-03-30	Show	GitHub Exploit DB Packet Storm

253983	10	危険	アップル	-	Apple Mac OS X の xar におけるパッケージ署名の検証処理に関する脆弱性	CWE-DesignError	CVE-2010-0055	2010-04-16 16:59	2010-03-29	Show	GitHub Exploit DB Packet Storm

253984	0	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0534	2010-04-16 16:58	2010-03-29	Show	GitHub Exploit DB Packet Storm

253985	5	警告	アップル	-	Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0523	2010-04-16 16:58	2010-03-29	Show	GitHub Exploit DB Packet Storm

253986	9	危険	アップル	-	Apple Mac OS X のサーバ管理における管理者権限の処理に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0522	2010-04-16 16:58	2010-03-29	Show	GitHub Exploit DB Packet Storm

253987	5	警告	アップル	-	Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-0521	2010-04-16 16:58	2010-03-29	Show	GitHub Exploit DB Packet Storm

253988	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4214	2010-04-16 16:58	2009-12-7	Show	GitHub Exploit DB Packet Storm

253989	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3009	2010-04-16 16:58	2009-09-8	Show	GitHub Exploit DB Packet Storm

253990	7.5	危険	アップル Ruby on Rails project	-	Ruby on Rails のダイジェスト認証における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-2422	2010-04-16 16:57	2009-07-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224291	7.8	HIGH Local	toaruos_project	toaruos	linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.	CWE-388 7PK - Errors	CVE-2019-13046	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

224292	8.1	HIGH Network	irssi	irssi	Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.	CWE-416 Use After Free	CVE-2019-13045	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224293	6.1	MEDIUM Network	mod_auth_mellon_project oracle fedoraproject canonical	mod_auth_mellon zfs_storage_appliance_kit fedora ubuntu_linux	mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.	CWE-601 Open Redirect	CVE-2019-13038	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224294	7.8	HIGH Local	pandorafms	pandora_fms	Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, t…	NVD-CWE-noinfo	CVE-2019-13035	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224295	5.5	MEDIUM Local	flightcrew_project	flightcrew	An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed to xc::XMLUri…	CWE-476 NULL Pointer Dereference	CVE-2019-13032	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224296	8.1	HIGH Network	lemonldap-ng debian	lemonldap\ debian_linux	LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server. By default, the notification server is not enabled and has a "deny all" r…	CWE-611 XXE	CVE-2019-13031	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224297	8.8	HIGH Network	minv	electronic_identification_cards_client	An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote attackers to execute arbitrary code (.cgi, .pl, or .php) or de…	CWE-284 Improper Access Control	CVE-2019-13028	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224298	7.5	HIGH Network	gnome	glib	The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kf…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-13012	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224299	5.3	MEDIUM Network	dropbear_ssh_project	dropbear_ssh	Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.	CWE-203 Information Exposure Through Discrepancy	CVE-2019-12953	2024-11-21 13:23	2020-12-31	Show	GitHub Exploit DB Packet Storm

224300	9.8	CRITICAL Network	dlink	dap-1650_firmware	An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing.	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-12768	2024-11-21 13:23	2020-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed