Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254321	4.9	警告	サイバートラスト株式会社 VMware Xen プロジェクトレッドハット	-	Xen の arch/ia64/xen/faults.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2070	2011-02-28 14:55	2010-06-16	Show	GitHub Exploit DB Packet Storm

254322	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の Bluetooth ソケットにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-1084	2011-02-28 14:54	2010-04-6	Show	GitHub Exploit DB Packet Storm

254323	5	警告	Eyrie VMware レッドハット	-	pam_krb5 における有効なユーザ名を列挙される脆弱性	CWE-287 不適切な認証	CVE-2009-1384	2011-02-28 14:51	2009-05-28	Show	GitHub Exploit DB Packet Storm

254324	4.4	警告	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Enterprise Linux の pam_krb5 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3825	2011-02-28 14:48	2008-10-2	Show	GitHub Exploit DB Packet Storm

254325	6.8	警告	Haxx アップル VMware サイバートラスト株式会社レッドハット	-	libcurl の content_encoding.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0734	2011-02-28 14:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

254326	4.3	警告	VMware OpenSSL Project	-	OpenSSL クライアントの ssl3_get_key_exchange 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2939	2011-02-28 14:39	2010-08-17	Show	GitHub Exploit DB Packet Storm

254327	10	危険	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の Java Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0886	2011-02-28 14:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

254328	8.3	危険	インターネットイニシアティブ	-	SEIL シリーズにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0454	2011-02-28 12:08	2011-02-28	Show	GitHub Exploit DB Packet Storm

254329	6.8	警告	Google	-	OpenCORE の Huffman デコーディング機能における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0475	2011-02-25 14:13	2009-02-17	Show	GitHub Exploit DB Packet Storm

254330	7.2	危険	Google	-	T-Mobile G1 phone 上で稼働する Open Handset Alliance Android の link_image 関数における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2009-0606	2011-02-25 14:11	2009-02-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220131	9.8	CRITICAL Network	powerdns	recursor	An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properl…	CWE-295 Improper Certificate Validation	CVE-2019-3807	2024-11-21 13:42	2019-01-30	Show	GitHub Exploit DB Packet Storm

220132	8.1	HIGH Network	powerdns	recursor	An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly…	NVD-CWE-noinfo	CVE-2019-3806	2024-11-21 13:42	2019-01-30	Show	GitHub Exploit DB Packet Storm

220133	8.1	HIGH Network	debian canonical netapp	advanced_package_tool ubuntu_linux debian_linux element_software active_iq	Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code executio…	NVD-CWE-noinfo	CVE-2019-3462	2024-11-21 13:42	2019-01-29	Show	GitHub Exploit DB Packet Storm

220134	7.1	HIGH Local	mcafee	total_protection	Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies…	NVD-CWE-noinfo	CVE-2019-3593	2024-11-21 13:42	2019-01-29	Show	GitHub Exploit DB Packet Storm

220135	3.3	LOW Local	redhat debian	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_aus openshift_container_platform debian_linux	A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_i…	-	CVE-2019-3815	2024-11-21 13:42	2019-01-29	Show	GitHub Exploit DB Packet Storm

220136	4.4	MEDIUM Local	linux debian canonical opensuse	linux_kernel debian_linux ubuntu_linux leap	A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local …	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-3819	2024-11-21 13:42	2019-01-26	Show	GitHub Exploit DB Packet Storm

220137	6.5	MEDIUM Local	mcafee	total_protection	DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised fo…	CWE-426 Untrusted Search Path	CVE-2019-3587	2024-11-21 13:42	2019-01-24	Show	GitHub Exploit DB Packet Storm

220138	6.0	MEDIUM Local	mcafee	mvision_endpoint	Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows authenticated administrator users --> administrators to Remove …	CWE-287 Improper Authentication	CVE-2019-3584	2024-11-21 13:42	2019-01-24	Show	GitHub Exploit DB Packet Storm

220139	9.8	CRITICAL Network	pivotal_software	spring_batch	Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.	CWE-611 XXE	CVE-2019-3774	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

220140	9.8	CRITICAL Network	pivotal_software oracle	spring_web_services flexcube_private_banking financial_services_analytical_applications_infrastructure	Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted source…	CWE-611 XXE	CVE-2019-3773	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm