Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 15, 2026, 12:10 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254181 | 4.3 | 警告 | マイクロソフト | - | 複数の Microsoft 製品の toStaticHTML 関数 および SafeHTML 関数におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3324 | 2010-12-3 14:05 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 254182 | 6.8 | 警告 | アップル | - | Apple Mac OS X の xar におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3798 | 2010-12-3 13:13 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
| 254183 | 3.5 | 注意 | アップル | - | Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3797 | 2010-12-3 13:12 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
| 254184 | 4.3 | 警告 | アップル | - | Apple Mac OS X の Safari RSS における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-3796 | 2010-12-3 13:10 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
| 254185 | 6 | 警告 | PostgreSQL.org サイバートラスト株式会社 ターボリナックス レッドハット |
- | PostgreSQL の PL/perl および PL/Tcl 実装における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3433 | 2010-12-2 17:11 | 2010-10-4 | Show | GitHub Exploit DB Packet Storm |
| 254186 | 6.8 | 警告 | アップル サイバートラスト株式会社 ターボリナックス FreeType Project オラクル レッドハット |
- | FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2808 | 2010-12-2 17:08 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 254187 | 5 | 警告 | アップル サイバートラスト株式会社 FreeType Project ターボリナックス レッドハット |
- | FreeType の Standard Encoding Accented Character の呼び出しにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-3054 | 2010-12-2 16:34 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 254188 | 4.3 | 警告 | アップル ターボリナックス FreeType Project |
- | FreeType の bdf/bdflib.c におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3053 | 2010-12-2 16:28 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 254189 | 5 | 警告 | アップル | - | Apple Mac OS X の Printing におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2010-3784 | 2010-12-1 16:14 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
| 254190 | 6.8 | 警告 | アップル | - | Apple Mac OS X のパスワードサーバにおけるパスワードの認証を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3783 | 2010-12-1 16:12 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 15, 2026, 4:28 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 214931 | 6.1 |
MEDIUM
Network |
upcoming_events_project | upcoming_events | An XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event. |
CWE-79
Cross-site Scripting |
CVE-2019-9650 | 2024-11-21 13:52 | 2019-03-11 | Show | GitHub Exploit DB Packet Storm |
| 214932 | 6.1 |
MEDIUM
Network |
codepeople | contact_form_email | The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area." |
CWE-79
Cross-site Scripting |
CVE-2019-9646 | 2024-11-21 13:52 | 2019-03-11 | Show | GitHub Exploit DB Packet Storm |
| 214933 | 9.8 |
CRITICAL
Network |
php debian canonical opensuse netapp |
php debian_linux ubuntu_linux leap storage_automation_store |
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF. |
CWE-908
Use of Uninitialized Resource |
CVE-2019-9641 | 2024-11-21 13:52 | 2019-03-9 | Show | GitHub Exploit DB Packet Storm |
| 214934 | 7.5 |
HIGH
Network |
php canonical debian opensuse netapp redhat |
php ubuntu_linux debian_linux leap storage_automation_store software_collections |
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn. |
CWE-125
Out-of-bounds Read |
CVE-2019-9640 | 2024-11-21 13:52 | 2019-03-9 | Show | GitHub Exploit DB Packet Storm |
| 214935 | 7.5 |
HIGH
Network |
php debian canonical opensuse netapp redhat |
php debian_linux ubuntu_linux leap storage_automation_store software_collections |
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling… |
CWE-908 CWE-909 Use of Uninitialized Resource Missing Initialization of Resource |
CVE-2019-9639 | 2024-11-21 13:52 | 2019-03-9 | Show | GitHub Exploit DB Packet Storm |
| 214936 | 7.5 |
HIGH
Network |
php debian canonical opensuse netapp redhat |
php debian_linux ubuntu_linux leap storage_automation_store software_collections |
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling… |
CWE-125
Out-of-bounds Read |
CVE-2019-9638 | 2024-11-21 13:52 | 2019-03-9 | Show | GitHub Exploit DB Packet Storm |
| 214937 | 7.5 |
HIGH
Network |
php debian canonical opensuse netapp |
php debian_linux ubuntu_linux leap storage_automation_store |
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2019-9637 | 2024-11-21 13:52 | 2019-03-9 | Show | GitHub Exploit DB Packet Storm |
| 214938 | 9.8 |
CRITICAL
Network |
python fedoraproject opensuse debian canonical redhat oracle |
python fedora leap debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux e… |
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (cr… |
NVD-CWE-noinfo
|
CVE-2019-9636 | 2024-11-21 13:52 | 2019-03-9 | Show | GitHub Exploit DB Packet Storm |
| 214939 | 7.8 |
HIGH
Local |
golang | go | Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection. |
CWE-427
Uncontrolled Search Path Element |
CVE-2019-9634 | 2024-11-21 13:52 | 2019-03-9 | Show | GitHub Exploit DB Packet Storm |
| 214940 | 6.5 |
MEDIUM
Network |
gnome | glib | gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial… |
CWE-754
Improper Check for Unusual or Exceptional Conditions |
CVE-2019-9633 | 2024-11-21 13:52 | 2019-03-8 | Show | GitHub Exploit DB Packet Storm |