Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254451	4.4	警告	KVM レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0419	2010-03-23 14:09	2010-03-1	Show	GitHub Exploit DB Packet Storm

254452	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0263	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254453	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0262	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254454	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0261	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254455	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0260	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254456	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0258	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254457	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0264	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254458	9.3	危険	マイクロソフト	-	Microsoft Office Excel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0257	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254459	9.3	危険	マイクロソフト	-	Microsoft Windows Movie Maker および Microsoft Producer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0265	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254460	8.5	危険	Samba Project	-	Samba の smbd におけるファイルパーミッションを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0728	2010-03-18 12:09	2010-03-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222561	9.9	CRITICAL Network	jenkins	jira	Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-16541	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

222562	6.5	MEDIUM Network	jenkins	support_core	A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master.	CWE-22 Path Traversal	CVE-2019-16540	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

222563	6.5	MEDIUM Network	jenkins	support_core	A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles.	CWE-281 Improper Preservation of Permissions	CVE-2019-16539	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

222564	8.8	HIGH Network	jenkins	script_security	A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in s…	CWE-863 Incorrect Authorization	CVE-2019-16538	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

222565	9.8	CRITICAL Network	linksys	velop_whw0303_firmware velop_whw0302_firmware velop_whw0301_firmware	Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI.	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-16340	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

222566	7.5	HIGH Network	gnu	serveez	GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value …	CWE-681 Incorrect Conversion between Numeric Types	CVE-2019-16200	2024-11-21 13:30	2019-11-20	Show	GitHub Exploit DB Packet Storm

222567	8.1	HIGH Network	blade-group	shadow	The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data…	NVD-CWE-noinfo	CVE-2019-16110	2024-11-21 13:30	2019-11-15	Show	GitHub Exploit DB Packet Storm

222568	5.5	MEDIUM Local	broadcom	brocade_sannav	Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save.	CWE-532 CWE-311 Inclusion of Sensitive Information in Log Files Missing Encryption of Sensitive Data	CVE-2019-16210	2024-11-21 13:30	2019-11-9	Show	GitHub Exploit DB Packet Storm

222569	7.4	HIGH Network	broadcom	brocade_sannav	A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections.	CWE-295 Improper Certificate Validation	CVE-2019-16209	2024-11-21 13:30	2019-11-9	Show	GitHub Exploit DB Packet Storm

222570	7.5	HIGH Network	broadcom	brocade_sannav	Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several se…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-16208	2024-11-21 13:30	2019-11-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed