Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254481 7.8 危険 ISC, Inc.
レッドハット		 - ISC DHCPv6 にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0413 2011-03-1 15:10 2011-01-28 Show GitHub Exploit DB Packet Storm
254482 7.5 危険 Google - Google Android SDK の BMP::readFromStream メソッドにおける整数オーバーフロー脆弱性 CWE-189
数値処理の問題 		CVE-2008-0986 2011-03-1 14:58 2008-03-6 Show GitHub Exploit DB Packet Storm
254483 6.8 警告 Google - Google Android SDK の GIF ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0985 2011-03-1 14:56 2008-03-6 Show GitHub Exploit DB Packet Storm
254484 7.2 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - 64-bit プラットフォーム上で稼働している Linux kernel の compat_alloc_user_space 関数における権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2010-3081 2011-03-1 14:46 2010-09-21 Show GitHub Exploit DB Packet Storm
254485 4.6 警告 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0291 2011-03-1 14:44 2010-02-15 Show GitHub Exploit DB Packet Storm
254486 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の sctp_process_unk_param 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1173 2011-03-1 14:43 2010-05-7 Show GitHub Exploit DB Packet Storm
254487 2.6 注意 サイバートラスト株式会社
VMware
Linux
レッドハット		 - RHEL の MMIO 命令デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0730 2011-03-1 14:42 2010-05-6 Show GitHub Exploit DB Packet Storm
254488 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の drivers/connector/connector.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0410 2011-03-1 14:41 2010-02-22 Show GitHub Exploit DB Packet Storm
254489 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux Kernel の azx_position_ok 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-1085 2011-03-1 14:40 2010-04-6 Show GitHub Exploit DB Packet Storm
254490 7.8 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux Kernel の ULE decapsulation functionality におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1086 2011-03-1 14:39 2010-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225161 7.1 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-16170 2024-11-21 13:30 2019-09-16 Show GitHub Exploit DB Packet Storm
225162 9.8 CRITICAL
Network 		fasterxml
fedoraproject
debian
netapp
redhat
oracle 		jackson-databind
fedora
debian_linux
steelstore_cloud_integrated_storage
oncommand_workflow_automation
oncommand_api_services
jboss_enterprise_application_platform
retail_xstore_… 		A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540. CWE-502
 Deserialization of Untrusted Data 		CVE-2019-16335 2024-11-21 13:30 2019-09-16 Show GitHub Exploit DB Packet Storm
225163 4.8 MEDIUM
Network 		bludit bludit In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field. NOTE: this may overlap CVE-2017-16636. CWE-79
Cross-site Scripting 		CVE-2019-16334 2024-11-21 13:30 2019-09-16 Show GitHub Exploit DB Packet Storm
225164 5.4 MEDIUM
Network 		get-simple getsimple_cms GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php. CWE-79
Cross-site Scripting 		CVE-2019-16333 2024-11-21 13:30 2019-09-16 Show GitHub Exploit DB Packet Storm
225165 6.1 MEDIUM
Network 		api_bearer_auth_project api_bearer_auth In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS. CWE-79
Cross-site Scripting 		CVE-2019-16332 2024-11-21 13:30 2019-09-16 Show GitHub Exploit DB Packet Storm
225166 6.1 MEDIUM
Network 		scadabr scadabr ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO. CWE-79
Cross-site Scripting 		CVE-2019-16321 2024-11-21 13:30 2019-09-16 Show GitHub Exploit DB Packet Storm
225167 7.5 HIGH
Network 		wireshark
opensuse
debian 		wireshark
leap
debian_linux 		In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-16319 2024-11-21 13:30 2019-09-16 Show GitHub Exploit DB Packet Storm
225168 8.8 HIGH
Network 		pimcore pimcore In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failure of automatic renaming of .php to .php.… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-16318 2024-11-21 13:30 2019-09-15 Show GitHub Exploit DB Packet Storm
225169 8.8 HIGH
Network 		pimcore pimcore In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable wi… CWE-502
 Deserialization of Untrusted Data 		CVE-2019-16317 2024-11-21 13:30 2019-09-15 Show GitHub Exploit DB Packet Storm
225170 6.1 MEDIUM
Network 		fujixerox docushare A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers … CWE-79
Cross-site Scripting 		CVE-2019-16307 2024-11-21 13:30 2019-09-15 Show GitHub Exploit DB Packet Storm