Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 19, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254601 | 6.5 | 警告 | Openswan レッドハット |
- | Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3302 | 2010-12-14 14:15 | 2010-09-27 | Show | GitHub Exploit DB Packet Storm |
| 254602 | 4.3 | 警告 | freedesktop.org レッドハット |
- | Poppler の PDF パーサ内にある poppler/Function.cc におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3703 | 2010-12-13 16:04 | 2010-11-5 | Show | GitHub Exploit DB Packet Storm |
| 254603 | 8.3 | 危険 | Linux レッドハット |
- | Linux kernel の sctp_auth_asoc_get_hmac 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3705 | 2010-12-13 15:57 | 2010-10-20 | Show | GitHub Exploit DB Packet Storm |
| 254604 | 6.6 | 警告 | Linux レッドハット |
- | Linux kernel の pkt_find_dev_from_minor 関数における整数符号エラーの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-3437 | 2010-12-13 15:41 | 2010-10-4 | Show | GitHub Exploit DB Packet Storm |
| 254605 | 7.2 | 危険 | Linux レッドハット |
- | x86_64 プラットフォーム上で稼動する Linux kernel の IA32 システムコールエミュレーション機能における権限昇格の脆弱性 |
CWE-DesignError
|
CVE-2010-3301 | 2010-12-13 15:29 | 2010-09-22 | Show | GitHub Exploit DB Packet Storm |
| 254606 | 7.2 | 危険 | Linux レッドハット |
- | Linux kernel の niu_get_ethtool_tcam_all 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3084 | 2010-12-10 15:24 | 2010-09-29 | Show | GitHub Exploit DB Packet Storm |
| 254607 | 3.3 | 注意 | Linux レッドハット |
- | Linux kernel の net/wireless/wext-compat.c 内にある cfg80211_wext_giwessid 関数における重要な情報を取得される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-2955 | 2010-12-10 15:13 | 2010-09-8 | Show | GitHub Exploit DB Packet Storm |
| 254608 | 9.3 | 危険 | アップル | - | Apple Safari の WebKit における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-1791 | 2010-12-10 14:57 | 2010-07-30 | Show | GitHub Exploit DB Packet Storm |
| 254609 | 9.3 | 危険 | アップル | - | iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-1781 | 2010-12-10 14:41 | 2010-09-8 | Show | GitHub Exploit DB Packet Storm |
| 254610 | 9.3 | 危険 | アップル | - | Apple Safari の WebKit における任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-1771 | 2010-12-10 14:40 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 20, 2026, 4:14 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225161 | 4.3 |
MEDIUM
Network |
gitlab | gitlab | GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint. |
NVD-CWE-noinfo
|
CVE-2019-15594 | 2024-11-21 13:29 | 2020-02-15 | Show | GitHub Exploit DB Packet Storm |
| 225162 | 4.3 |
MEDIUM
Network |
gitlab | gitlab | GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline. |
NVD-CWE-noinfo
|
CVE-2019-15592 | 2024-11-21 13:29 | 2020-02-15 | Show | GitHub Exploit DB Packet Storm |
| 225163 | 9.8 |
CRITICAL
Network |
nodejs oracle debian redhat opensuse |
node.js graalvm communications_cloud_native_core_network_function_cloud_native_environment debian_linux enterprise_linux enterprise_linux_eus leap |
Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons |
NVD-CWE-Other
|
CVE-2019-15606 | 2024-11-21 13:29 | 2020-02-8 | Show | GitHub Exploit DB Packet Storm |
| 225164 | 9.8 |
CRITICAL
Network |
nodejs debian fedoraproject opensuse redhat oracle |
node.js debian_linux fedora leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server software_collections enterprise_linux enterprise_linux_server… |
HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed |
CWE-444
HTTP Request Smuggling |
CVE-2019-15605 | 2024-11-21 13:29 | 2020-02-8 | Show | GitHub Exploit DB Packet Storm |
| 225165 | 7.5 |
HIGH
Network |
nodejs debian opensuse redhat oracle |
node.js debian_linux leap software_collections enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux graalvm communications_cloud_na… |
Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate |
CWE-295
Improper Certificate Validation |
CVE-2019-15604 | 2024-11-21 13:29 | 2020-02-8 | Show | GitHub Exploit DB Packet Storm |
| 225166 | 7.8 |
HIGH
Local |
fortinet | forticlient | A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportL… |
NVD-CWE-noinfo
|
CVE-2019-15711 | 2024-11-21 13:29 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |
| 225167 | 4.9 |
MEDIUM
Network |
nextcloud opensuse suse |
nextcloud_server backports suse_linux_enterprise_server |
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. |
CWE-20
Improper Input Validation |
CVE-2019-15624 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 225168 | 5.3 |
MEDIUM
Network |
nextcloud suse opensuse |
nextcloud_server package_hub backports_sle |
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disable… |
NVD-CWE-noinfo
|
CVE-2019-15623 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 225169 | 2.4 |
LOW
Physics |
nextcloud | nextcloud | Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries. |
CWE-89
SQL Injection |
CVE-2019-15622 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 225170 | 6.5 |
MEDIUM
Network |
nextcloud | nextcloud_server | Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link. |
CWE-281
Improper Preservation of Permissions |
CVE-2019-15621 | 2024-11-21 13:29 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |