Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255141 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2010-3941 2011-01-17 14:29 2010-12-14 Show GitHub Exploit DB Packet Storm
255142 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2010-3940 2011-01-14 15:55 2010-12-14 Show GitHub Exploit DB Packet Storm
255143 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3939 2011-01-14 15:53 2010-12-14 Show GitHub Exploit DB Packet Storm
255144 9.3 危険 マイクロソフト - Microsoft Windows の Internet Connection Signup Wizard における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3144 2011-01-14 15:49 2010-12-14 Show GitHub Exploit DB Packet Storm
255145 9.3 危険 マイクロソフト - Windows Address Book の wab.exe における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3147 2011-01-14 15:47 2010-12-14 Show GitHub Exploit DB Packet Storm
255146 6.9 警告 マイクロソフト - Microsoft Windows における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3966 2011-01-14 15:42 2010-12-14 Show GitHub Exploit DB Packet Storm
255147 6.9 警告 マイクロソフト - Windows Media Encoder における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3965 2011-01-14 15:39 2010-12-14 Show GitHub Exploit DB Packet Storm
255148 6.9 警告 マイクロソフト - Microsoft Windows Movie Maker における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-3967 2011-01-14 15:36 2010-12-14 Show GitHub Exploit DB Packet Storm
255149 7.2 危険 マイクロソフト - Microsoft Windows の Windows Task Scheduler における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2010-3338 2011-01-14 15:31 2010-12-14 Show GitHub Exploit DB Packet Storm
255150 6.9 警告 マイクロソフト - Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性 CWE-94
コード・インジェクション
CVE-2010-3959 2011-01-14 15:27 2010-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220611 7.8 HIGH
Local
micco unlha32.dll Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified dir… CWE-426
 Untrusted Search Path
CVE-2019-5911 2024-11-21 13:45 2019-02-14 Show GitHub Exploit DB Packet Storm
220612 9.8 CRITICAL
Network
d-circle power_egg Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2.3 Patch 9 and earlier, Ver 2.4 Patch 13 and earlier, Ver 2… CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2019-5916 2024-11-21 13:45 2019-02-14 Show GitHub Exploit DB Packet Storm
220613 7.5 HIGH
Network
housegate house_gate Directory traversal vulnerability in HOUSE GATE App for iOS 1.7.8 and earlier allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal
CVE-2019-5910 2024-11-21 13:45 2019-02-14 Show GitHub Exploit DB Packet Storm
220614 9.8 CRITICAL
Network
yokogawa b\/m_9000_vp
prm
prosafe-rs
centum_vp
License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.… CWE-287
Improper Authentication
CVE-2019-5909 2024-11-21 13:45 2019-02-14 Show GitHub Exploit DB Packet Storm
220615 8.8 HIGH
Local
freebsd freebsd In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can c… NVD-CWE-noinfo
CVE-2019-5596 2024-11-21 13:45 2019-02-12 Show GitHub Exploit DB Packet Storm
220616 5.5 MEDIUM
Local
freebsd freebsd In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from system calls, potentiall… CWE-459
 Incomplete Cleanup
CVE-2019-5595 2024-11-21 13:45 2019-02-12 Show GitHub Exploit DB Packet Storm
220617 8.6 HIGH
Local
docker
linuxfoundation
redhat
google
linuxcontainers
hp
netapp
apache
opensuse
d2iq
fedoraproject
canonical
microfocus
docker
runc
enterprise_linux_server
openshift
enterprise_linux
container_development_kit
kubernetes_engine
lxc
onesphere
solidfire
hci_management_node
mesos
leap
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to e… CWE-78
OS Command 
CVE-2019-5736 2024-11-21 13:45 2019-02-12 Show GitHub Exploit DB Packet Storm
220618 5.9 MEDIUM
Network
openbsd
winscp
canonical
debian
redhat
fedoraproject
apache
freebsd
fujitsu
siemens
openssh
winscp
ubuntu_linux
debian_linux
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
fedora
mina_sshd
freebsd
m10-1_…
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only perf… CWE-22
Path Traversal
CVE-2019-6111 2024-11-21 13:45 2019-02-1 Show GitHub Exploit DB Packet Storm
220619 6.8 MEDIUM
Network
openbsd
winscp
netapp
siemens
openssh
winscp
element_software
storage_automation_store
ontap_select_deploy
scalance_x204rna_firmware
scalance_x204rna_eec_firmware
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI c… CWE-838
 Inappropriate Encoding for Output Context
CVE-2019-6110 2024-11-21 13:45 2019-02-1 Show GitHub Exploit DB Packet Storm
220620 6.8 MEDIUM
Network
openbsd
winscp
canonical
debian
netapp
fedoraproject
redhat
siemens
fujitsu
openssh
winscp
ubuntu_linux
debian_linux
element_software
storage_automation_store
ontap_select_deploy
fedora
enterprise_linux
enterprise_linux_eus
enterprise_linux_serv…
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the… CWE-116
 Improper Encoding or Escaping of Output
CVE-2019-6109 2024-11-21 13:45 2019-02-1 Show GitHub Exploit DB Packet Storm