Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254451	4.4	警告	KVM レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0419	2010-03-23 14:09	2010-03-1	Show	GitHub Exploit DB Packet Storm

254452	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0263	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254453	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0262	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254454	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0261	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254455	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0260	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254456	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0258	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254457	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0264	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254458	9.3	危険	マイクロソフト	-	Microsoft Office Excel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0257	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254459	9.3	危険	マイクロソフト	-	Microsoft Windows Movie Maker および Microsoft Producer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0265	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254460	8.5	危険	Samba Project	-	Samba の smbd におけるファイルパーミッションを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0728	2010-03-18 12:09	2010-03-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224241	8.8	HIGH Network	espocrm	espocrm	EspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker can brute-force a user password hash by 1 symbol at a time using specially crafted api/v1/User?filter…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-14351	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224242	6.1	MEDIUM Network	espocrm	espocrm	EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/Kn…	CWE-79 Cross-site Scripting	CVE-2019-14350	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224243	6.1	MEDIUM Network	espocrm	espocrm	EspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the api/v1/Document functionality for storing documents in the account tab. An attacker can upload…	CWE-79 Cross-site Scripting	CVE-2019-14349	2024-11-21 13:26	2019-07-29	Show	GitHub Exploit DB Packet Storm

224244	6.1	MEDIUM Network	espocrm	espocrm	An issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of user-supplied data in Create User. A malicious attacker can modify the firstName and lastName to contai…	CWE-79 Cross-site Scripting	CVE-2019-14331	2024-11-21 13:26	2019-07-28	Show	GitHub Exploit DB Packet Storm

224245	6.1	MEDIUM Network	espocrm	espocrm	An issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of user-supplied data in Create Case. A malicious attacker can modify the firstName and lastName to contai…	CWE-79 Cross-site Scripting	CVE-2019-14330	2024-11-21 13:26	2019-07-28	Show	GitHub Exploit DB Packet Storm

224246	6.1	MEDIUM Network	espocrm	espocrm	An issue was discovered in EspoCRM before 5.6.6. There is stored XSS due to lack of filtration of user-supplied data in Create Task. A malicious attacker can modify the parameter name to contain Java…	CWE-79 Cross-site Scripting	CVE-2019-14329	2024-11-21 13:26	2019-07-28	Show	GitHub Exploit DB Packet Storm

224247	8.8	HIGH Network	simple-membership-plugin	simple_membership	The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.	CWE-352 Origin Validation Error	CVE-2019-14328	2024-11-21 13:26	2019-07-28	Show	GitHub Exploit DB Packet Storm

224248	7.5	HIGH Network	simple_service_discovery_protocol_responder_project	simple_service_discovery_protocol_responder	SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is …	CWE-787 CWE-193 Out-of-bounds Write Off-by-one Error	CVE-2019-14323	2024-11-21 13:26	2019-07-28	Show	GitHub Exploit DB Packet Storm

224249	7.5	HIGH Network	palletsprojects	werkzeug	In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.	CWE-22 Path Traversal	CVE-2019-14322	2024-11-21 13:26	2019-07-28	Show	GitHub Exploit DB Packet Storm

224250	6.1	MEDIUM Network	sunhater	kcfinder	A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditor…	CWE-79 Cross-site Scripting	CVE-2019-14315	2024-11-21 13:26	2019-07-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed