Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254391	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3673	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

254392	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3671	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

254393	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性	CWE-255 CWE-94	CVE-2009-3677	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

254394	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2505	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

254395	6.9	警告	acpid	-	acpid の umask におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4235	2010-01-21 11:44	2009-12-7	Show	GitHub Exploit DB Packet Storm

254396	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

254397	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

254398	9.3	危険	アドビシステムズ	-	Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4195	2010-01-21 11:43	2009-12-4	Show	GitHub Exploit DB Packet Storm

254399	4.4	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1337	2010-01-21 11:23	2009-04-22	Show	GitHub Exploit DB Packet Storm

254400	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel における sendmsg 関数の呼び出しに関するサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5300	2010-01-21 11:22	2008-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224291	7.8	HIGH Local	toaruos_project	toaruos	linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.	CWE-388 7PK - Errors	CVE-2019-13046	2024-11-21 13:24	2019-06-30	Show	GitHub Exploit DB Packet Storm

224292	8.1	HIGH Network	irssi	irssi	Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.	CWE-416 Use After Free	CVE-2019-13045	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224293	6.1	MEDIUM Network	mod_auth_mellon_project oracle fedoraproject canonical	mod_auth_mellon zfs_storage_appliance_kit fedora ubuntu_linux	mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.	CWE-601 Open Redirect	CVE-2019-13038	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224294	7.8	HIGH Local	pandorafms	pandora_fms	Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, t…	NVD-CWE-noinfo	CVE-2019-13035	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224295	5.5	MEDIUM Local	flightcrew_project	flightcrew	An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed to xc::XMLUri…	CWE-476 NULL Pointer Dereference	CVE-2019-13032	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224296	8.1	HIGH Network	lemonldap-ng debian	lemonldap\ debian_linux	LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server. By default, the notification server is not enabled and has a "deny all" r…	CWE-611 XXE	CVE-2019-13031	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224297	8.8	HIGH Network	minv	electronic_identification_cards_client	An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote attackers to execute arbitrary code (.cgi, .pl, or .php) or de…	CWE-284 Improper Access Control	CVE-2019-13028	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224298	7.5	HIGH Network	gnome	glib	The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kf…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-13012	2024-11-21 13:24	2019-06-29	Show	GitHub Exploit DB Packet Storm

224299	5.3	MEDIUM Network	dropbear_ssh_project	dropbear_ssh	Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.	CWE-203 Information Exposure Through Discrepancy	CVE-2019-12953	2024-11-21 13:23	2020-12-31	Show	GitHub Exploit DB Packet Storm

224300	9.8	CRITICAL Network	dlink	dap-1650_firmware	An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing.	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-12768	2024-11-21 13:23	2020-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed