Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254741 4.3 警告 アップル
サイバートラスト株式会社
LibTIFF
サン・マイクロシステムズ
レッドハット		 - libtiff の LZWDecodeCompat 関数におけるバッファアンダーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2285 2010-04-27 15:19 2009-07-1 Show GitHub Exploit DB Packet Storm
254742 4.3 警告 サイバートラスト株式会社
レッドハット		 - Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性 - CVE-2006-7176 2010-04-27 15:18 2007-03-27 Show GitHub Exploit DB Packet Storm
254743 6.9 警告 アップル - Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-0532 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
254744 4.3 警告 アップル - Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0531 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
254745 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0536 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
254746 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0529 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
254747 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0528 2010-04-26 16:58 2010-03-31 Show GitHub Exploit DB Packet Storm
254748 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0527 2010-04-26 16:58 2010-03-31 Show GitHub Exploit DB Packet Storm
254749 5 警告 アップル
サイバートラスト株式会社
Ruby-lang.org
レッドハット		 - Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-1904 2010-04-26 16:46 2009-06-9 Show GitHub Exploit DB Packet Storm
254750 6.9 警告 アップル
Vim		 - Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性 CWE-Other
その他 		CVE-2009-0316 2010-04-26 16:45 2009-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219241 9.8 CRITICAL
Network 		gnu libredwg An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec. CWE-476
 NULL Pointer Dereference 		CVE-2019-20914 2024-11-21 13:39 2020-07-17 Show GitHub Exploit DB Packet Storm
219242 8.1 HIGH
Network 		gnu libredwg An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec. CWE-125
Out-of-bounds Read 		CVE-2019-20913 2024-11-21 13:39 2020-07-17 Show GitHub Exploit DB Packet Storm
219243 8.8 HIGH
Network 		gnu libredwg An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF. CWE-787
 Out-of-bounds Write 		CVE-2019-20912 2024-11-21 13:39 2020-07-17 Show GitHub Exploit DB Packet Storm
219244 6.5 MEDIUM
Network 		gnu libredwg An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-20911 2024-11-21 13:39 2020-07-17 Show GitHub Exploit DB Packet Storm
219245 8.1 HIGH
Network 		gnu libredwg An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011. CWE-125
Out-of-bounds Read 		CVE-2019-20910 2024-11-21 13:39 2020-07-17 Show GitHub Exploit DB Packet Storm
219246 7.5 HIGH
Network 		gnu libredwg An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec. CWE-476
 NULL Pointer Dereference 		CVE-2019-20909 2024-11-21 13:39 2020-07-17 Show GitHub Exploit DB Packet Storm
219247 6.7 MEDIUM
Local 		linux
opensuse
canonical 		linux_kernel
leap
ubuntu_linux 		An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or s… NVD-CWE-noinfo
CVE-2019-20908 2024-11-21 13:39 2020-07-16 Show GitHub Exploit DB Packet Storm
219248 7.5 HIGH
Network 		python
opensuse
debian
fedoraproject
canonical
netapp
oracle 		python
leap
debian_linux
fedora
ubuntu_linux
active_iq_unified_manager
cloud_volumes_ontap_mediator
zfs_storage_appliance_kit 		In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-20907 2024-11-21 13:39 2020-07-13 Show GitHub Exploit DB Packet Storm
219249 6.1 MEDIUM
Network 		atlassian jira
jira_server 		The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of perform… CWE-601
Open Redirect 		CVE-2019-20901 2024-11-21 13:39 2020-07-13 Show GitHub Exploit DB Packet Storm
219250 4.8 MEDIUM
Network 		atlassian jira_server
jira_data_center 		Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the Add Field module. The af… CWE-79
Cross-site Scripting 		CVE-2019-20900 2024-11-21 13:39 2020-07-13 Show GitHub Exploit DB Packet Storm