Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255021 4 警告 オラクル - Oracle iPlanet Web Server におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3544 2010-10-18 12:03 2010-10-18 Show GitHub Exploit DB Packet Storm
255022 5 警告 ISC, Inc. - BIND の ACL の処理に問題 CWE-264
認可・権限・アクセス制御 		CVE-2010-0218 2010-10-15 13:24 2010-10-1 Show GitHub Exploit DB Packet Storm
255023 5.1 警告 K2 Software - K2Editor における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3156 2010-10-15 11:22 2010-10-15 Show GitHub Exploit DB Packet Storm
255024 6.8 警告 kMonos.NET - XacRett における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3157 2010-10-15 11:22 2010-10-15 Show GitHub Exploit DB Packet Storm
255025 5 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2101 2010-10-14 16:20 2010-05-26 Show GitHub Exploit DB Packet Storm
255026 9.3 危険 レッドハット - Winamp および libmikmod の IN_MOD.DLL におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3996 2010-10-14 16:19 2009-12-18 Show GitHub Exploit DB Packet Storm
255027 9.3 危険 レッドハット - Winamp および libmikmod の IN_MOD.DLL におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3995 2010-10-14 16:19 2009-12-18 Show GitHub Exploit DB Packet Storm
255028 4.3 警告 レッドハット - libmikmod におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-6720 2010-10-14 16:19 2009-01-20 Show GitHub Exploit DB Packet Storm
255029 7.8 危険 シスコシステムズ - Cisco IOS の SSL VPN 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2836 2010-10-13 17:00 2010-09-22 Show GitHub Exploit DB Packet Storm
255030 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-2051 2010-10-13 16:59 2010-09-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225061 5.3 MEDIUM
Network 		cksource ckfinder An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof… CWE-200
Information Exposure 		CVE-2019-15891 2024-11-21 13:29 2019-09-27 Show GitHub Exploit DB Packet Storm
225062 7.5 HIGH
Network 		cksource ckfinder An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload files without any extension (even if the application was configured to accept file… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-15862 2024-11-21 13:29 2019-09-27 Show GitHub Exploit DB Packet Storm
225063 9.8 CRITICAL
Network 		lemonldap-ng
debian 		lemonldap\
debian_linux 		OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an… CWE-863
 Incorrect Authorization 		CVE-2019-15941 2024-11-21 13:29 2019-09-26 Show GitHub Exploit DB Packet Storm
225064 9.1 CRITICAL
Network 		suricata-ids suricata An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is… CWE-125
Out-of-bounds Read 		CVE-2019-15699 2024-11-21 13:29 2019-09-25 Show GitHub Exploit DB Packet Storm
225065 4.9 MEDIUM
Network 		grafana grafana An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL) are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and … CWE-319
CWE-522
Cleartext Transmission of Sensitive Information
 Insufficiently Protected Credentials 		CVE-2019-15635 2024-11-21 13:29 2019-09-24 Show GitHub Exploit DB Packet Storm
225066 8.8 HIGH
Network 		valvesoftware counter-strike\ vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this serve… CWE-787
 Out-of-bounds Write 		CVE-2019-15943 2024-11-21 13:29 2019-09-19 Show GitHub Exploit DB Packet Storm
225067 7.4 HIGH
Network 		mi xiaomi_millet_firmware A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may lead to partial data leakage or maliciou… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-15843 2024-11-21 13:29 2019-09-19 Show GitHub Exploit DB Packet Storm
225068 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request. CWE-863
 Incorrect Authorization 		CVE-2019-15729 2024-11-21 13:29 2019-09-18 Show GitHub Exploit DB Packet Storm
225069 9.8 CRITICAL
Network 		gitlab omnibus An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation NVD-CWE-noinfo
CVE-2019-15741 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
225070 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads. CWE-200
Information Exposure 		CVE-2019-15740 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm