Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255201 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
255202 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
255203 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255204 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255205 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
255206 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
255207 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
255208 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
255209 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
255210 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219751 6.5 MEDIUM
Network 		cesnet libyang A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang… CWE-476
 NULL Pointer Dereference 		CVE-2019-20398 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219752 8.8 HIGH
Network 		cesnet libyang A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vul… CWE-415
 Double Free 		CVE-2019-20397 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219753 6.5 MEDIUM
Network 		cesnet libyang A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-20396 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219754 6.5 MEDIUM
Network 		cesnet libyang A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash. CWE-674
 Uncontrolled Recursion 		CVE-2019-20395 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219755 8.8 HIGH
Network 		cesnet libyang A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang fil… CWE-415
 Double Free 		CVE-2019-20394 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219756 8.8 HIGH
Network 		cesnet libyang A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to … CWE-415
 Double Free 		CVE-2019-20393 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219757 6.5 MEDIUM
Network 		cesnet libyang An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not def… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-20392 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219758 6.5 MEDIUM
Network 		cesnet libyang An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse un… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-20391 2024-11-21 13:38 2020-01-23 Show GitHub Exploit DB Packet Storm
219759 7.5 HIGH
Network 		opensuse
debian 		libsolv
debian_linux 		repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema. CWE-125
Out-of-bounds Read 		CVE-2019-20387 2024-11-21 13:38 2020-01-22 Show GitHub Exploit DB Packet Storm
219760 7.5 HIGH
Network 		xmlsoft
debian
netapp
oracle
opensuse
fedoraproject 		libxml2
debian_linux
cloud_backup
steelstore_cloud_integrated_storage
ontap_select_deploy_administration_utility
clustered_data_ontap
smi-s_provider
snapdrive
plug-in_for_syma… 		xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-20388 2024-11-21 13:38 2020-01-22 Show GitHub Exploit DB Packet Storm