Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254341 2.6 注意 アップル
サイバートラスト株式会社
MySQL AB
レッドハット
- MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4456 2010-04-15 18:15 2008-10-6 Show GitHub Exploit DB Packet Storm
254342 10 危険 アップル - Apple Mac OS X の Mail における脆弱性 CWE-noinfo
情報不足
CVE-2010-0508 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
254343 6.8 警告 アップル - Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0507 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
254344 6.8 警告 アップル - Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0506 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
254345 6.8 警告 アップル - Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0505 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
254346 7.5 危険 アップル - Apple Mac OS X の iChat サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0504 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
254347 6.5 警告 アップル - Apple Mac OS X の iChat サーバにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0503 2010-04-14 17:10 2010-03-29 Show GitHub Exploit DB Packet Storm
254348 4.3 警告 アップル - Apple Mac OS X の iChat サーバにおけるメッセージの監査を回避可能な脆弱性 CWE-DesignError
CVE-2010-0502 2010-04-14 17:10 2010-03-29 Show GitHub Exploit DB Packet Storm
254349 5 警告 アップル
レッドハット
jabberd 2.x project
- Jabber Studio jabberd の SASL ネゴシエーションにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-1329 2010-04-14 17:10 2006-03-21 Show GitHub Exploit DB Packet Storm
254350 7.2 危険 アップル - Apple Mac OS X の FTP サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0501 2010-04-14 17:10 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223011 7.0 HIGH
Local
linux
debian
opensuse
linux_kernel
debian_linux
leap
An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c. CWE-416
 Use After Free
CVE-2019-15917 2024-11-21 13:29 2019-09-5 Show GitHub Exploit DB Packet Storm
223012 7.5 HIGH
Network
linux linux_kernel An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2019-15916 2024-11-21 13:29 2019-09-5 Show GitHub Exploit DB Packet Storm
223013 5.4 MEDIUM
Network
sentrifugo sentrifugo Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML. CWE-79
Cross-site Scripting
CVE-2019-15814 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223014 8.8 HIGH
Network
sentrifugo sentrifugo Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-15813 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223015 4.4 MEDIUM
Local
systemd_project
fedoraproject
redhat
systemd
fedora
enterprise_linux
openshift_container_platform
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_server_update_services_…
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access… NVD-CWE-noinfo
CVE-2019-15718 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223016 7.5 HIGH
Network
libexpat_project
python
libexpat
python
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumn… CWE-125
CWE-776
Out-of-bounds Read
XML Entity Expansion
CVE-2019-15903 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223017 5.6 MEDIUM
Local
linux
debian
opensuse
netapp
linux_kernel
debian_linux
leap
active_iq_performance_analytics_services
service_processor
baseboard_management_controller_firmware
A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse … CWE-200
Information Exposure
CVE-2019-15902 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223018 6.1 MEDIUM
Network
nagios log_server Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page. CWE-79
Cross-site Scripting
CVE-2019-15898 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223019 7.5 HIGH
Network
varnish_cache_project
varnish-software
debian
varnish_cache
debian_linux
An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests… CWE-617
 Reachable Assertion
CVE-2019-15892 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223020 6.1 MEDIUM
Network
wpdownloadmanager wordpress_download_manager The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter. CWE-79
Cross-site Scripting
CVE-2019-15889 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm