Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254191	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1902	2010-09-1 15:17	2010-08-10	Show	GitHub Exploit DB Packet Storm

254192	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1901	2010-09-1 15:17	2010-08-10	Show	GitHub Exploit DB Packet Storm

254193	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1900	2010-09-1 15:16	2010-08-10	Show	GitHub Exploit DB Packet Storm

254194	9.3	危険	マイクロソフト	-	Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1898	2010-09-1 15:16	2010-08-10	Show	GitHub Exploit DB Packet Storm

254195	6.8	警告	マイクロソフト	-	Microsoft Windows のカーネルにおける権限を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1889	2010-09-1 15:16	2010-08-10	Show	GitHub Exploit DB Packet Storm

254196	6.8	警告	マイクロソフト	-	Microsoft Windows XP のカーネルにおける権限を取得される脆弱性	CWE-362 競合状態	CVE-2010-1888	2010-09-1 15:16	2010-08-10	Show	GitHub Exploit DB Packet Storm

254197	9.3	危険	マイクロソフト	-	Microsoft Silverlight における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0019	2010-09-1 15:15	2010-08-10	Show	GitHub Exploit DB Packet Storm

254198	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の layout/generic/nsObjectFrame.cpp における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2755	2010-09-1 14:54	2010-07-20	Show	GitHub Exploit DB Packet Storm

254199	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のローカルプログラムを実行させられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1240	2010-09-1 14:52	2010-04-5	Show	GitHub Exploit DB Packet Storm

254200	9.3	危険	マイクロソフト	-	Microsoft Windows の Secure Channel における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2566	2010-08-31 16:46	2010-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224711	7.5	HIGH Network	foxitsoftware	phantompdf	An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationships between a child an…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-14207	2024-11-21 13:26	2019-07-22	Show	GitHub Exploit DB Packet Storm

224712	7.5	HIGH Network	nevma	adaptive_images	An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to delete arbitrary files via the $REQUEST['adaptive-images-settings']…	CWE-22 Path Traversal	CVE-2019-14206	2024-11-21 13:26	2019-07-22	Show	GitHub Exploit DB Packet Storm

224713	7.5	HIGH Network	nevma	adaptive_images	A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['…	CWE-22 Path Traversal	CVE-2019-14205	2024-11-21 13:26	2019-07-22	Show	GitHub Exploit DB Packet Storm

224714	9.6	CRITICAL Network	google	chrome	Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security sever…	CWE-269 Improper Privilege Management	CVE-2019-13690	2024-11-21 13:25	2023-08-26	Show	GitHub Exploit DB Packet Storm

224715	7.8	HIGH Local	google	chrome	Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Crit…	CWE-59 Link Following	CVE-2019-13689	2024-11-21 13:25	2023-08-26	Show	GitHub Exploit DB Packet Storm

224716	7.4	HIGH Network	google	chrome	Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrome security severity: High)	CWE-416 Use After Free	CVE-2019-13768	2024-11-21 13:25	2023-01-3	Show	GitHub Exploit DB Packet Storm

224717	6.5	MEDIUM Adjacent	sierrawireless	mgos	Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Forced Browsing).	NVD-CWE-noinfo	CVE-2019-13988	2024-11-21 13:25	2022-12-27	Show	GitHub Exploit DB Packet Storm

224718	6.1	MEDIUM Network	blinger	blinger	Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Telegram, WhatsApp, Viber, Skype, Facebook, V…	CWE-79 Cross-site Scripting	CVE-2019-13633	2024-11-21 13:25	2020-10-20	Show	GitHub Exploit DB Packet Storm

224719	7.8	HIGH Local	qualcomm	kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9607_firmware mdm9650_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs605_firmware qcs610_firmware ren…	u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S…	CWE-190 Integer Overflow or Wraparound	CVE-2019-14056	2024-11-21 13:25	2020-09-8	Show	GitHub Exploit DB Packet Storm

224720	9.8	CRITICAL Network	qualcomm	apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9625_firmware<…	u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In…	CWE-908 Use of Uninitialized Resource	CVE-2019-14052	2024-11-21 13:25	2020-09-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed