Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254751 9.3 危険 アップル
サイバートラスト株式会社
Vim
レッドハット
- Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-4101 2010-04-26 16:45 2008-10-9 Show GitHub Exploit DB Packet Storm
254752 9.3 危険 アップル
サイバートラスト株式会社
Vim
レッドハット
- Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-2712 2010-04-26 16:45 2008-10-9 Show GitHub Exploit DB Packet Storm
254753 4.3 警告 VMware - VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1193 2010-04-21 17:54 2010-03-29 Show GitHub Exploit DB Packet Storm
254754 7.5 危険 VMware - 複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2010-0686 2010-04-21 17:53 2010-03-29 Show GitHub Exploit DB Packet Storm
254755 4.3 警告 VMware - 複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1137 2010-04-21 17:51 2010-03-29 Show GitHub Exploit DB Packet Storm
254756 4.6 警告 GNU Project
サイバートラスト株式会社
レッドハット
- GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4029 2010-04-21 17:51 2009-12-20 Show GitHub Exploit DB Packet Storm
254757 5 警告 Linux
レッドハット
- Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0741 2010-04-21 17:48 2010-03-30 Show GitHub Exploit DB Packet Storm
254758 6.9 警告 mielke
レッドハット
- brltty の libbrlttybba.so における権限昇格の脆弱性 CWE-264
CWE-Other
CVE-2008-3279 2010-04-21 17:47 2010-03-30 Show GitHub Exploit DB Packet Storm
254759 4.3 警告 Mozilla Foundation - Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0181 2010-04-20 16:42 2010-03-30 Show GitHub Exploit DB Packet Storm
254760 5.8 警告 サイボウズ - 複数のサイボウズ製品におけるアクセス制限に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2029 2010-04-20 12:01 2010-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224701 9.8 CRITICAL
Network
onionbuzz onionbuzz An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the points parameter in the ob_get_results ajax nopriv handler due to there being no s… CWE-89
SQL Injection
CVE-2019-14231 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224702 9.8 CRITICAL
Network
onionbuzz onionbuzz An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id parameter in the set_count ajax nopriv handler due to there being no sanitizati… CWE-89
SQL Injection
CVE-2019-14230 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224703 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling xfa.event.rest XFA JavaScript due to accessing a wild pointer. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2019-14215 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224704 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a JavaScript Denial of Service when deleting pages in a document that contains only one page by calling … NVD-CWE-noinfo
CVE-2019-14214 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224705 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the repeated release of the signature dictionary during CSG_SignatureF and CPDF_Document destruction. NVD-CWE-noinfo
CVE-2019-14213 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224706 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on… CWE-476
 NULL Pointer Dereference
CVE-2019-14212 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224707 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper validation of the existence of an object prior to performing operations on that object… CWE-20
 Improper Input Validation 
CVE-2019-14211 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224708 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Memory Corruption due to the use of an invalid pointer copy, resulting from a destructed string object. CWE-787
 Out-of-bounds Write
CVE-2019-14210 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224709 9.8 CRITICAL
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm. CWE-787
 Out-of-bounds Write
CVE-2019-14209 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm
224710 7.5 HIGH
Network
foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain por… CWE-476
 NULL Pointer Dereference
CVE-2019-14208 2024-11-21 13:26 2019-07-22 Show GitHub Exploit DB Packet Storm