Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254021 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222361 6.1 MEDIUM
Network
wp-slimstat slimstat_analytics The wp-slimstat plugin before 4.8.1 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2019-15112 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222362 9.8 CRITICAL
Network
wp_front_end_profile_project wp_front_end_profile The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue. NVD-CWE-noinfo
CVE-2019-15111 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222363 6.1 MEDIUM
Network
wp_front_end_profile_project wp_front_end_profile The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2019-15110 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222364 6.1 MEDIUM
Network
stellarwp the_events_calendar The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter. CWE-79
Cross-site Scripting
CVE-2019-15109 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222365 7.8 HIGH
Local
audiocoding
debian
freeware_advanced_audio_decoder_2
debian_linux
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2019-15296 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222366 7.8 HIGH
Local
acdsee photo_studio An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDE_ACDStd!IEP_ShowPlugInDialog+0x000000000023d060. NVD-CWE-noinfo
CVE-2019-15293 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222367 4.7 MEDIUM
Local
linux
debian
canonical
linux_kernel
debian_linux
ubuntu_linux
An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.… CWE-416
 Use After Free
CVE-2019-15292 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222368 8.8 HIGH
Network
cformsii_project cformsii The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. CWE-352
 Origin Validation Error
CVE-2019-15238 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222369 4.6 MEDIUM
Physics
linux linux_kernel An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop… CWE-476
 NULL Pointer Dereference
CVE-2019-15291 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222370 6.1 MEDIUM
Network
oldstreetsolutions live_input_macros The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie. CWE-79
Cross-site Scripting
CVE-2019-15233 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm