Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254421 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
254422 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
254423 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
254424 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
254425 9.3 危険 マイクロソフト - Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3135 2010-01-6 14:44 2009-11-10 Show GitHub Exploit DB Packet Storm
254426 5 警告 トレンドマイクロ
日本電気
Apache Software Foundation
富士通
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
レッドハット		 - Apache Tomcat の Apache HTTP Server との組合せによるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-0450 2010-01-6 14:43 2007-03-16 Show GitHub Exploit DB Packet Storm
254427 9.3 危険 マイクロソフト - Microsoft Office Excel および Open XML File Format Converter におけるオブジェクトを含むスプレッドシートの処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3133 2010-01-5 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
254428 9.3 危険 マイクロソフト - Microsoft Office Excel および Open XML File Format Converter における BIFF レコードの処理に関する任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-3130 2010-01-5 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
254429 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるエクセルファイルのフォーマットの処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3134 2010-01-5 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
254430 9.3 危険 マイクロソフト - 複数の Microsoft 製品における計算式を含むスプレッドシートの処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3132 2010-01-5 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213131 7.5 HIGH
Network 		apple
apache
canonical
debian
synology
fedoraproject
opensuse
redhat
oracle
mcafee
netapp
nodejs 		swiftnio
traffic_server
http_server
ubuntu_linux
debian_linux
skynas
diskstation_manager
vs960hd_firmware
fedora
leap
software_collections
jboss_core_services
ente… 		Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without const… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-9517 2024-11-21 13:51 2019-08-14 Show GitHub Exploit DB Packet Storm
213132 6.5 MEDIUM
Network 		apple
apache
canonical
debian
fedoraproject
synology
opensuse
redhat
oracle
mcafee
f5
nodejs 		swiftnio
traffic_server
ubuntu_linux
debian_linux
fedora
skynas
diskstation_manager
vs960hd_firmware
leap
software_collections
jboss_core_services
enterprise_linux 		Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-9516 2024-11-21 13:51 2019-08-14 Show GitHub Exploit DB Packet Storm
213133 7.5 HIGH
Network 		apple
apache
debian
nodejs 		swiftnio
traffic_server
debian_linux
node.js 		Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queu… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-9512 2024-11-21 13:51 2019-08-14 Show GitHub Exploit DB Packet Storm
213134 7.5 HIGH
Network 		apple
apache
canonical
debian
synology
fedoraproject
opensuse
redhat
oracle
mcafee
f5
nodejs 		swiftnio
traffic_server
ubuntu_linux
debian_linux
skynas
diskstation_manager
vs960hd_firmware
fedora
leap
software_collections
jboss_core_services
enterprise_linux 		Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-9515 2024-11-21 13:51 2019-08-14 Show GitHub Exploit DB Packet Storm
213135 7.5 HIGH
Network 		apple
apache
debian
canonical
synology
fedoraproject
opensuse
redhat
oracle
mcafee
netapp
f5
nodejs 		swiftnio
traffic_server
debian_linux
ubuntu_linux
skynas
diskstation_manager
vs960hd_firmware
fedora
leap
enterprise_linux_workstation
enterprise_linux_server
softwar… 		Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that shou… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-9514 2024-11-21 13:51 2019-08-14 Show GitHub Exploit DB Packet Storm
213136 7.5 HIGH
Network 		apple
apache
canonical
debian
fedoraproject
synology
opensuse
redhat
oracle
mcafee
f5
nodejs 		swiftnio
traffic_server
ubuntu_linux
debian_linux
fedora
skynas
diskstation_manager
vs960hd_firmware
leap
software_collections
jboss_core_services
enterprise_linux 		Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the st… NVD-CWE-Other
CVE-2019-9513 2024-11-21 13:51 2019-08-14 Show GitHub Exploit DB Packet Storm
213137 7.5 HIGH
Network 		apple
apache
canonical
debian
synology
fedoraproject
opensuse
redhat
oracle
mcafee
f5
nodejs 		swiftnio
traffic_server
ubuntu_linux
debian_linux
skynas
diskstation_manager
vs960hd_firmware
fedora
leap
software_collections
jboss_core_services
enterprise_linux 		Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-9511 2024-11-21 13:51 2019-08-14 Show GitHub Exploit DB Packet Storm
213138 9.8 CRITICAL
Network 		imgtech zoneplayer ZInsVX.dll ActiveX Control 2018.02 and earlier in Zoneplayer contains a vulnerability that could allow remote attackers to execute arbitrary files by setting the arguments to the ActiveX method. This… NVD-CWE-noinfo
CVE-2019-9141 2024-11-21 13:51 2019-08-3 Show GitHub Exploit DB Packet Storm
213139 8.1 HIGH
Network 		happypointcard happypoint When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive infor… CWE-601
Open Redirect 		CVE-2019-9140 2024-11-21 13:51 2019-08-2 Show GitHub Exploit DB Packet Storm
213140 7.8 HIGH
Local 		trendmicro officescan A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protec… CWE-426
 Untrusted Search Path 		CVE-2019-9492 2024-11-21 13:51 2019-07-26 Show GitHub Exploit DB Packet Storm