Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254171	5	警告	Squid-cache.org	-	Squid の htcpHandleTstRequest 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0639	2010-03-8 12:28	2010-02-12	Show	GitHub Exploit DB Packet Storm

254172	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3302	2010-03-5 10:33	2010-02-12	Show	GitHub Exploit DB Packet Storm

254173	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の filter/ww8/ww8par2.cxx における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3301	2010-03-5 10:33	2010-02-12	Show	GitHub Exploit DB Packet Storm

254174	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2950	2010-03-5 10:32	2010-02-12	Show	GitHub Exploit DB Packet Storm

254175	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2949	2010-03-5 10:32	2010-02-12	Show	GitHub Exploit DB Packet Storm

254176	4.3	警告	アドビシステムズ	-	Adobe BlazeDS における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-3960	2010-03-5 10:32	2010-02-11	Show	GitHub Exploit DB Packet Storm

254177	6.8	警告	Linux レッドハット	-	KVM の pit_ioport_read 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-16 環境設定	CVE-2010-0309	2010-03-4 13:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

254178	4.1	警告	Linux レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0306	2010-03-4 13:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

254179	5	警告	レッドハットリアルネットワークス	-	RealNetworks HelixPlayer および RealPlayer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0417	2010-03-4 13:40	2010-02-18	Show	GitHub Exploit DB Packet Storm

254180	7.5	危険	レッドハットリアルネットワークス	-	RealNetworks HelixPlayer および RealPlayer の Unescape 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0416	2010-03-4 13:40	2010-02-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214321	6.1	MEDIUM Network	topnew	sidu	An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting (XSS) vulnerability.	CWE-79 Cross-site Scripting	CVE-2019-7546	2024-11-21 13:48	2019-02-7	Show	GitHub Exploit DB Packet Storm

214322	5.4	MEDIUM Network	dbninja	dbninja	In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name field.	CWE-79 Cross-site Scripting	CVE-2019-7545	2024-11-21 13:48	2019-02-7	Show	GitHub Exploit DB Packet Storm

214323	5.4	MEDIUM Network	mywebsql	mywebsql	An issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name Field.	CWE-79 Cross-site Scripting	CVE-2019-7544	2024-11-21 13:48	2019-02-7	Show	GitHub Exploit DB Packet Storm

214324	6.1	MEDIUM Network	kindsoft	kindeditor	In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.	CWE-79 Cross-site Scripting	CVE-2019-7543	2024-11-21 13:48	2019-02-7	Show	GitHub Exploit DB Packet Storm

214325	6.1	MEDIUM Network	parallax_scroll_project	parallax_scroll	In the Parallax Scroll (aka adamrob-parallax-scroll) plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. ("parallax" has a spelling change within t…	CWE-79 Cross-site Scripting	CVE-2019-7413	2024-11-21 13:48	2019-02-6	Show	GitHub Exploit DB Packet Storm

214326	9.8	CRITICAL Network	ps_phpcaptcha_wp_project	ps_phpcaptcha_wp	The PS PHPCaptcha WP plugin before v1.2.0 for WordPress mishandles sanitization of input values.	CWE-20 Improper Input Validation	CVE-2019-7412	2024-11-21 13:48	2019-02-6	Show	GitHub Exploit DB Packet Storm

214327	4.9	MEDIUM Network	phpmywind	phpmywind	An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/database_backup.php?action=import&dopost=deldir&tbname=../ URI.	CWE-22 Path Traversal	CVE-2019-7403	2024-11-21 13:48	2019-02-6	Show	GitHub Exploit DB Packet Storm

214328	6.1	MEDIUM Network	phpmywind	phpmywind	An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfg_qqcode parameter. This can be exploited via CSRF.	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2019-7402	2024-11-21 13:48	2019-02-6	Show	GitHub Exploit DB Packet Storm

214329	6.1	MEDIUM Network	rukovoditel	rukovoditel	Rukovoditel before 2.4.1 allows XSS.	CWE-79 Cross-site Scripting	CVE-2019-7400	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214330	7.5	HIGH Network	imagemagick opensuse debian canonical	imagemagick leap debian_linux ubuntu_linux	In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-7398	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm