Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255341 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
255342 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
255343 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255344 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255345 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
255346 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
255347 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
255348 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
255349 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
255350 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222691 7.8 HIGH
Local 		nipper-ng_project nipper-ng A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Ex… CWE-787
 Out-of-bounds Write 		CVE-2019-17424 2024-11-21 13:32 2019-10-22 Show GitHub Exploit DB Packet Storm
222692 7.5 HIGH
Network 		universal_office_converter_project universal_office_converter The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-17400 2024-11-21 13:32 2019-10-22 Show GitHub Exploit DB Packet Storm
222693 8.1 HIGH
Network 		libssh2
fedoraproject
opensuse
debian
netapp 		libssh2
fedora
leap
debian_linux
element_software
ontap_select_deploy_administration_utility
solidfire
hci_management_node
active_iq_unified_manager
bootstrap_os 		In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-17498 2024-11-21 13:32 2019-10-22 Show GitHub Exploit DB Packet Storm
222694 9.8 CRITICAL
Network 		citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware 		An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 bef… NVD-CWE-noinfo
CVE-2019-18225 2024-11-21 13:32 2019-10-22 Show GitHub Exploit DB Packet Storm
222695 6.1 MEDIUM
Network 		ricoh mp_501_firmware On the RICOH MP 501 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn and KeyDisplay parameter to /web/entry/en/address/a… CWE-79
Cross-site Scripting 		CVE-2019-18203 2024-11-21 13:32 2019-10-22 Show GitHub Exploit DB Packet Storm
222696 9.8 CRITICAL
Network 		gnu libidn2 idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. CWE-787
 Out-of-bounds Write 		CVE-2019-18224 2024-11-21 13:32 2019-10-22 Show GitHub Exploit DB Packet Storm
222697 7.8 HIGH
Local 		file_project
debian
opensuse
netapp
fedoraproject
canonical 		file
debian_linux
leap
active_iq_unified_manager
fedora
ubuntu_linux 		cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write). CWE-787
 Out-of-bounds Write 		CVE-2019-18218 2024-11-21 13:32 2019-10-21 Show GitHub Exploit DB Packet Storm
222698 7.5 HIGH
Network 		proftpd proftpd ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinit… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-18217 2024-11-21 13:32 2019-10-21 Show GitHub Exploit DB Packet Storm
222699 6.1 MEDIUM
Network 		open-emr openemr Reflected XSS exists in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter. CWE-79
Cross-site Scripting 		CVE-2019-17409 2024-11-21 13:32 2019-10-21 Show GitHub Exploit DB Packet Storm
222700 6.8 MEDIUM
Physics 		asus rog_zephyrus_m_gm501gs_firmware The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of using a CMOS battery, which reduces the value of a protection mechanism in whi… NVD-CWE-noinfo
CVE-2019-18216 2024-11-21 13:32 2019-10-21 Show GitHub Exploit DB Packet Storm