Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 8, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254181 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows の Microsoft Paint における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0028 | 2010-03-3 11:54 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254182 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows の kernel における権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2010-0233 | 2010-03-3 11:54 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254183 | 6.3 | 警告 | マイクロソフト | - | Microsoft Windows の KDC におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2010-0035 | 2010-03-3 11:54 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254184 | 7.1 | 危険 | マイクロソフト | - | Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-362
競合状態 |
CVE-2010-0021 | 2010-03-3 11:54 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254185 | 10 | 危険 | マイクロソフト | - | Microsoft Windows の SMB 実装におけるアクセス権を取得される脆弱性 |
CWE-264 CWE-310 |
CVE-2010-0231 | 2010-03-3 11:54 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254186 | 7.8 | 危険 | マイクロソフト | - | Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0022 | 2010-03-3 11:53 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254187 | 9 | 危険 | マイクロソフト | - | Microsoft Windows の SMB 実装における任意のコードを実行される脆弱性 |
CWE-20 CWE-94 |
CVE-2010-0020 | 2010-03-3 11:53 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254188 | 6.9 | 警告 | マイクロソフト | - | Microsoft Windows の Client/Server Run-time Subsystem における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0023 | 2010-03-3 11:53 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254189 | 4 | 警告 | マイクロソフト | - | Microsoft Windows の Hyper-V サーバ実装におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0026 | 2010-03-3 11:53 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254190 | 9.3 | 危険 | 日本電気 アップル 富士通 古河電気工業 ヒューレット・パッカード インターネットイニシアティブ アラクサラネットワークス 日立 |
- | IPv6 NDP 実装における Neighbor Discovery メッセージの送信元検証処理に関する脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-2476 | 2010-03-3 11:43 | 2008-10-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 8, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 222341 | 4.3 |
MEDIUM
Network |
gitlab | gitlab | GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint. |
NVD-CWE-noinfo
|
CVE-2019-15594 | 2024-11-21 13:29 | 2020-02-15 | Show | GitHub Exploit DB Packet Storm |
| 222342 | 4.3 |
MEDIUM
Network |
gitlab | gitlab | GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline. |
NVD-CWE-noinfo
|
CVE-2019-15592 | 2024-11-21 13:29 | 2020-02-15 | Show | GitHub Exploit DB Packet Storm |
| 222343 | 9.8 |
CRITICAL
Network |
nodejs oracle debian redhat opensuse |
node.js graalvm communications_cloud_native_core_network_function_cloud_native_environment debian_linux enterprise_linux enterprise_linux_eus leap |
Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons |
NVD-CWE-Other
|
CVE-2019-15606 | 2024-11-21 13:29 | 2020-02-8 | Show | GitHub Exploit DB Packet Storm |
| 222344 | 9.8 |
CRITICAL
Network |
nodejs debian fedoraproject opensuse redhat oracle |
node.js debian_linux fedora leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server software_collections enterprise_linux enterprise_linux_server… |
HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed |
CWE-444
HTTP Request Smuggling |
CVE-2019-15605 | 2024-11-21 13:29 | 2020-02-8 | Show | GitHub Exploit DB Packet Storm |
| 222345 | 7.5 |
HIGH
Network |
nodejs debian opensuse redhat oracle |
node.js debian_linux leap software_collections enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux graalvm communications_cloud_na… |
Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate |
CWE-295
Improper Certificate Validation |
CVE-2019-15604 | 2024-11-21 13:29 | 2020-02-8 | Show | GitHub Exploit DB Packet Storm |
| 222346 | 7.8 |
HIGH
Local |
fortinet | forticlient | A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportL… |
NVD-CWE-noinfo
|
CVE-2019-15711 | 2024-11-21 13:29 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |
| 222347 | 4.9 |
MEDIUM
Network |
nextcloud opensuse suse |
nextcloud_server backports suse_linux_enterprise_server |
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. |
CWE-20
Improper Input Validation |
CVE-2019-15624 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 222348 | 5.3 |
MEDIUM
Network |
nextcloud suse opensuse |
nextcloud_server package_hub backports_sle |
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disable… |
NVD-CWE-noinfo
|
CVE-2019-15623 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 222349 | 2.4 |
LOW
Physics |
nextcloud | nextcloud | Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries. |
CWE-89
SQL Injection |
CVE-2019-15622 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 222350 | 6.5 |
MEDIUM
Network |
nextcloud | nextcloud_server | Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link. |
CWE-281
Improper Preservation of Permissions |
CVE-2019-15621 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |