Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254391 4.3 警告 Opera Software ASA - Opera における data: URI をブロックしない脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3013 2010-09-27 16:13 2009-08-31 Show GitHub Exploit DB Packet Storm
254392 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-2577 2010-09-27 16:12 2009-07-22 Show GitHub Exploit DB Packet Storm
254393 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-2540 2010-09-27 16:11 2009-07-20 Show GitHub Exploit DB Packet Storm
254394 4.3 警告 Opera Software ASA - Opera における javascript: URI をブロックしない脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2351 2010-09-27 16:11 2009-07-7 Show GitHub Exploit DB Packet Storm
254395 6.8 警告 Opera Software ASA - Opera における任意の https サイトになりすまされる脆弱性 CWE-287
不適切な認証
CVE-2009-2070 2010-09-27 16:11 2009-06-15 Show GitHub Exploit DB Packet Storm
254396 6.8 警告 Opera Software ASA - Opera における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2067 2010-09-27 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
254397 6.8 警告 Opera Software ASA - Opera における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2063 2010-09-27 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
254398 6.8 警告 Opera Software ASA - Opera における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2059 2010-09-27 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
254399 9.3 危険 アドビシステムズ
Opera Software ASA
- Opera における Adobe Acrobat の JavaScript の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1599 2010-09-27 16:09 2009-05-11 Show GitHub Exploit DB Packet Storm
254400 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-7245 2010-09-27 16:09 2009-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219421 7.5 HIGH
Network
pivotal_software concourse Pivotal Concourse, all versions prior to 4.2.2, puts the user access token in a url during the login flow. A remote attacker who gains access to a user's browser history could obtain the access token… CWE-200
Information Exposure
CVE-2019-3803 2024-11-21 13:42 2019-01-12 Show GitHub Exploit DB Packet Storm
219422 6.5 MEDIUM
Network
djangoproject
debian
canonical
fedoraproject
django
debian_linux
ubuntu_linux
fedora
In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defa… CWE-74
Injection
CVE-2019-3498 2024-11-21 13:42 2019-01-10 Show GitHub Exploit DB Packet Storm
219423 7.5 HIGH
Network
mcafee mcafee_web_gateway Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter. CWE-20
 Improper Input Validation 
CVE-2019-3581 2024-11-21 13:42 2019-01-9 Show GitHub Exploit DB Packet Storm
219424 10.0 CRITICAL
Network
zohocorp manageengine_adselfservice_plus Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2019-3905 2024-11-21 13:42 2019-01-4 Show GitHub Exploit DB Packet Storm
219425 7.8 HIGH
Local
sqla_yaml_fixtures_project sqla_yaml_fixtures Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load. CWE-94
Code Injection
CVE-2019-3575 2024-11-21 13:42 2019-01-4 Show GitHub Exploit DB Packet Storm
219426 4.4 MEDIUM
Local
linux
debian
canonical
linux_kernel
debian_linux
ubuntu_linux
An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dl… CWE-787
 Out-of-bounds Write
CVE-2019-3701 2024-11-21 13:42 2019-01-4 Show GitHub Exploit DB Packet Storm
219427 7.5 HIGH
Network
openrefine openrefine OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file. CWE-22
Path Traversal
CVE-2019-3580 2024-11-21 13:42 2019-01-3 Show GitHub Exploit DB Packet Storm
219428 9.8 CRITICAL
Network
bijiadao waimai_super_cms An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI. CWE-89
SQL Injection
CVE-2019-3577 2024-11-21 13:42 2019-01-3 Show GitHub Exploit DB Packet Storm
219429 9.8 CRITICAL
Network
inxedu_project inxedu inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.us… CWE-89
SQL Injection
CVE-2019-3576 2024-11-21 13:42 2019-01-3 Show GitHub Exploit DB Packet Storm
219430 6.5 MEDIUM
Network
libming libming An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated wi… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2019-3572 2024-11-21 13:42 2019-01-3 Show GitHub Exploit DB Packet Storm