Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254161 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliance におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0565 2010-03-10 11:23 2010-02-17 Show GitHub Exploit DB Packet Storm
254162 7.8 危険 シスコシステムズ - Cisco Firewall Services Module におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0151 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
254163 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0569 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
254164 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0150 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
254165 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0149 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
254166 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0162 2010-03-9 11:02 2010-02-17 Show GitHub Exploit DB Packet Storm
254167 5 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3988 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
254168 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey の Web ワーカー機能における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0160 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
254169 2.1 注意 サイバートラスト株式会社
GNOME Project
レッドハット
- NetworkManager の nm-connection-editor における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-4145 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
254170 6.8 警告 サイバートラスト株式会社
GNOME Project
レッドハット
- NetworkManager における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2009-4144 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224141 6.1 MEDIUM
Network
wikindx_project wikindx A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart para… CWE-79
Cross-site Scripting
CVE-2019-13588 2024-11-21 13:25 2019-07-27 Show GitHub Exploit DB Packet Storm
224142 9.8 CRITICAL
Network
softwareag
oracle
apache
netapp
atlassian
quartz
flexcube_investor_servicing
retail_xstore_point_of_service
flexcube_private_banking
primavera_unifier
retail_integration_bus
retail_back_office
webcenter_sites
fusion_m…
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. CWE-611
XXE
CVE-2019-13990 2024-11-21 13:25 2019-07-27 Show GitHub Exploit DB Packet Storm
224143 6.5 MEDIUM
Network
mikrotik routeros Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive… CWE-674
 Uncontrolled Recursion
CVE-2019-13955 2024-11-21 13:25 2019-07-26 Show GitHub Exploit DB Packet Storm
224144 6.5 MEDIUM
Network
mikrotik routeros Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server and in some … CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2019-13954 2024-11-21 13:25 2019-07-26 Show GitHub Exploit DB Packet Storm
224145 7.8 HIGH
Local
gnu
debian
patch
debian_linux
GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed edit… CWE-78
OS Command 
CVE-2019-13638 2024-11-21 13:25 2019-07-26 Show GitHub Exploit DB Packet Storm
224146 7.5 HIGH
Network
openldap
canonical
debian
opensuse
f5
apple
oracle
openldap
ubuntu_linux
debian_linux
leap
traffix_signaling_delivery_controller
mac_os_x
solaris
zfs_storage_appliance_kit
blockchain_platform
An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtai… NVD-CWE-noinfo
CVE-2019-13565 2024-11-21 13:25 2019-07-26 Show GitHub Exploit DB Packet Storm
224147 9.8 CRITICAL
Network
exim
debian
exim
debian_linux
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an attacker (e.g., $lo… CWE-19
 Data Processing Errors
CVE-2019-13917 2024-11-21 13:25 2019-07-26 Show GitHub Exploit DB Packet Storm
224148 7.2 HIGH
Network
ajdg adrotate The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection. CWE-89
SQL Injection
CVE-2019-13570 2024-11-21 13:25 2019-07-24 Show GitHub Exploit DB Packet Storm
224149 9.8 CRITICAL
Network
icegram email_subscribers_\&_newsletters A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to … CWE-89
SQL Injection
CVE-2019-13569 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
224150 6.5 MEDIUM
Adjacent
arduino arduino_firmware Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, because of LED photosensitivity. NVD-CWE-noinfo
CVE-2019-13991 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm