Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254841 5 警告 日立 - JP1/NETM/DM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
- 2011-03-1 15:26 2011-01-31 Show GitHub Exploit DB Packet Storm
254842 7.5 危険 IBM - IBM DB2 の DB2 Administration Server コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0731 2011-03-1 15:17 2011-01-28 Show GitHub Exploit DB Packet Storm
254843 7.8 危険 ISC, Inc.
レッドハット
- ISC DHCPv6 にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-0413 2011-03-1 15:10 2011-01-28 Show GitHub Exploit DB Packet Storm
254844 7.5 危険 Google - Google Android SDK の BMP::readFromStream メソッドにおける整数オーバーフロー脆弱性 CWE-189
数値処理の問題
CVE-2008-0986 2011-03-1 14:58 2008-03-6 Show GitHub Exploit DB Packet Storm
254845 6.8 警告 Google - Google Android SDK の GIF ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0985 2011-03-1 14:56 2008-03-6 Show GitHub Exploit DB Packet Storm
254846 7.2 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- 64-bit プラットフォーム上で稼働している Linux kernel の compat_alloc_user_space 関数における権限昇格の脆弱性 CWE-119
バッファエラー
CVE-2010-3081 2011-03-1 14:46 2010-09-21 Show GitHub Exploit DB Packet Storm
254847 4.6 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0291 2011-03-1 14:44 2010-02-15 Show GitHub Exploit DB Packet Storm
254848 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の sctp_process_unk_param 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1173 2011-03-1 14:43 2010-05-7 Show GitHub Exploit DB Packet Storm
254849 2.6 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- RHEL の MMIO 命令デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0730 2011-03-1 14:42 2010-05-6 Show GitHub Exploit DB Packet Storm
254850 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の drivers/connector/connector.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0410 2011-03-1 14:41 2010-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221211 5.5 MEDIUM
Local
ibm watson_studio_local IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413. CWE-522
 Insufficiently Protected Credentials
CVE-2019-4335 2024-11-21 13:43 2019-12-31 Show GitHub Exploit DB Packet Storm
221212 5.4 MEDIUM
Network
ibm cognos_analytics IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot… CWE-79
Cross-site Scripting
CVE-2019-4555 2024-11-21 13:43 2019-12-21 Show GitHub Exploit DB Packet Storm
221213 4.3 MEDIUM
Network
ibm
netapp
cognos_analytics
oncommand_insight
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru… CWE-352
 Origin Validation Error
CVE-2019-4231 2024-11-21 13:43 2019-12-21 Show GitHub Exploit DB Packet Storm
221214 7.5 HIGH
Network
ibm api_connect IBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 168510. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-4609 2024-11-21 13:43 2019-12-19 Show GitHub Exploit DB Packet Storm
221215 4.8 MEDIUM
Network
hcltech appscan_source HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript code in the Web UI. CWE-79
Cross-site Scripting
CVE-2019-4388 2024-11-21 13:43 2019-12-18 Show GitHub Exploit DB Packet Storm
221216 6.5 MEDIUM
Network
elog_project
fedoraproject
elog
fedora
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests. CWE-610
Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-3996 2024-11-21 13:43 2019-12-18 Show GitHub Exploit DB Packet Storm
221217 7.5 HIGH
Network
elog_project
fedoraproject
elog
fedora
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP … CWE-476
 NULL Pointer Dereference
CVE-2019-3995 2024-11-21 13:43 2019-12-18 Show GitHub Exploit DB Packet Storm
221218 7.5 HIGH
Network
elog_project
fedoraproject
elog
fedora
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST reques… CWE-416
 Use After Free
CVE-2019-3994 2024-11-21 13:43 2019-12-18 Show GitHub Exploit DB Packet Storm
221219 7.5 HIGH
Network
elog_project
fedoraproject
elog
fedora
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2019-3993 2024-11-21 13:43 2019-12-18 Show GitHub Exploit DB Packet Storm
221220 7.5 HIGH
Network
elog_project
fedoraproject
elog
fedora
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Among… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2019-3992 2024-11-21 13:43 2019-12-18 Show GitHub Exploit DB Packet Storm