Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255401	9.3	危険	マイクロソフト	-	Microsoft Windows Vista の sdclt.exe にて使用される BitLocker Drive Encryption API における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3145	2011-01-28 15:56	2011-01-11	Show	GitHub Exploit DB Packet Storm

255402	9.3	危険	マイクロソフト	-	MDAC および WDAC における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0027	2011-01-28 15:53	2011-01-11	Show	GitHub Exploit DB Packet Storm

255403	9.3	危険	マイクロソフト	-	MDAC および WDAC の SQLConnectW 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-0026	2011-01-28 15:50	2011-01-11	Show	GitHub Exploit DB Packet Storm

255404	9.3	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の sect_enttec_dmx_da 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4538	2011-01-28 15:46	2011-01-7	Show	GitHub Exploit DB Packet Storm

255405	5.8	警告	Mozilla Foundation オラクル	-	Mozilla Firefox の js_InitRandom 関数におけるシードの値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-3399	2011-01-28 15:41	2010-09-15	Show	GitHub Exploit DB Packet Storm

255406	10	危険	Google	-	Google Chrome の WebSockets の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-3254	2011-01-27 15:05	2010-09-2	Show	GitHub Exploit DB Packet Storm

255407	10	危険	Google	-	Google Chrome の notification permissions の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3253	2011-01-27 15:04	2010-09-2	Show	GitHub Exploit DB Packet Storm

255408	10	危険	Google	-	Google Chrome の Notifications presenter におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3252	2011-01-27 15:02	2010-09-2	Show	GitHub Exploit DB Packet Storm

255409	4.3	警告	Google	-	Google Chrome の WebSockets 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3251	2011-01-27 15:01	2010-09-2	Show	GitHub Exploit DB Packet Storm

255410	5	警告	Google	-	Google Chrome におけるインストールされた拡張機能の設定を列挙される脆弱性	CWE-noinfo 情報不足	CVE-2010-3250	2011-01-27 15:00	2010-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225711	7.8	HIGH Local	opendetex_project	opendetex	OpenDetex 2.8.5 has a Buffer Overflow in TexOpen in detex.l because of an incorrect sprintf.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-19601	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225712	8.8	HIGH Adjacent	dlink	dap-1860_firmware	D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value. In HTTP requests, part of the HNAP_AUTH header is…	CWE-287 Improper Authentication	CVE-2019-19598	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225713	8.8	HIGH Adjacent	dlink	dap-1860_firmware	D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.	CWE-863 Incorrect Authorization	CVE-2019-19597	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225714	5.4	MEDIUM Network	gitbook	gitbook	GitBook through 2.6.9 allows XSS via a local .md file.	CWE-79 Cross-site Scripting	CVE-2019-19596	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225715	7.8	HIGH Local	radare	radare2	In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the b…	CWE-190 CWE-416 Integer Overflow or Wraparound Use After Free	CVE-2019-19590	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225716	9.8	CRITICAL Network	wp-pdf	pdf_embedder	The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives. Note: It has been argued that "The vulnerability reported in PDF…	CWE-436 Interpretation Conflict	CVE-2019-19589	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225717	7.5	HIGH Network	validators_project	validators	The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-19588	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225718	6.1	MEDIUM Network	wso2	enterprise_integrator	In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console.	CWE-79 Cross-site Scripting	CVE-2019-19587	2024-11-21 13:35	2019-12-5	Show	GitHub Exploit DB Packet Storm

225719	5.4	MEDIUM Network	microsoft	sharepoint_enterprise_server	A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office S…	CWE-79 Cross-site Scripting	CVE-2019-1070	2024-11-21 13:35	2019-10-10	Show	GitHub Exploit DB Packet Storm

225720	8.8	HIGH Network	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.	CWE-611 XXE	CVE-2019-1060	2024-11-21 13:35	2019-10-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed