Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254391	7.8	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における終端文字列の処理に関する重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-2495	2011-01-14 14:33	2009-07-28	Show	GitHub Exploit DB Packet Storm

254392	9.3	危険	サン・マイクロシステムズアドビシステムズ日本電気マイクロソフト OpenOffice.org Project	-	Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2493	2011-01-14 14:32	2009-07-28	Show	GitHub Exploit DB Packet Storm

254393	9.3	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0901	2011-01-14 14:31	2009-07-28	Show	GitHub Exploit DB Packet Storm

254394	6.9	警告	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3957	2011-01-13 16:22	2010-12-14	Show	GitHub Exploit DB Packet Storm

254395	9.3	危険	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3956	2011-01-13 16:19	2010-12-14	Show	GitHub Exploit DB Packet Storm

254396	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3346	2011-01-13 16:15	2010-12-14	Show	GitHub Exploit DB Packet Storm

254397	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3345	2011-01-13 16:11	2010-12-14	Show	GitHub Exploit DB Packet Storm

254398	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3343	2011-01-13 15:48	2010-12-14	Show	GitHub Exploit DB Packet Storm

254399	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3340	2011-01-13 15:43	2010-12-14	Show	GitHub Exploit DB Packet Storm

254400	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Advanced Audio Coding におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4395	2011-01-12 15:29	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218991	9.8	CRITICAL Network	rubyonrails debian fedoraproject	rails debian_linux fedora	A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can …	CWE-330 Use of Insufficiently Random Values	CVE-2019-5420	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

218992	7.5	HIGH Network	rubyonrails debian redhat opensuse fedoraproject	rails debian_linux software_collections cloudforms leap fedora	There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-5419	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

218993	7.5	HIGH Network	rubyonrails debian redhat opensuse fedoraproject	rails debian_linux cloudforms leap fedora software_collections	There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the targ…	NVD-CWE-noinfo	CVE-2019-5418	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

218994	7.5	HIGH Network	zeit	serve	A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.	CWE-22 Path Traversal	CVE-2019-5417	2024-11-21 13:44	2019-03-22	Show	GitHub Exploit DB Packet Storm

218995	7.5	HIGH Network	localhost-now_project	localhost-now	A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.	CWE-22 Path Traversal	CVE-2019-5416	2024-11-21 13:44	2019-03-22	Show	GitHub Exploit DB Packet Storm

218996	7.5	HIGH Network	zeit	serve	A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.	CWE-269 Improper Privilege Management	CVE-2019-5415	2024-11-21 13:44	2019-03-22	Show	GitHub Exploit DB Packet Storm

218997	8.1	HIGH Network	kill-port_project	kill-port	If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.	CWE-78 OS Command	CVE-2019-5414	2024-11-21 13:44	2019-03-22	Show	GitHub Exploit DB Packet Storm

218998	9.8	CRITICAL Network	morgan_project	morgan	An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.	CWE-77 Command Injection	CVE-2019-5413	2024-11-21 13:44	2019-03-22	Show	GitHub Exploit DB Packet Storm

218999	5.5	MEDIUM Local	macpaw	cleanmymac_x	An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon up…	CWE-459 Incomplete Cleanup	CVE-2019-5011	2024-11-21 13:44	2019-03-22	Show	GitHub Exploit DB Packet Storm

219000	7.8	HIGH Local	pixar	renderman	A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their…	NVD-CWE-noinfo	CVE-2019-5015	2024-11-21 13:44	2019-03-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed