Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255431	6.4	警告	アップル	-	Apple Mac OS X のアプリケーションファイアウォールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2801	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

255432	6.8	警告	アップル	-	Apple Mac OS X の Cocoa のスペルチェック機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0056	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

255433	4.4	警告	アップルサイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAPd にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2632	2010-04-13 14:46	2009-09-10	Show	GitHub Exploit DB Packet Storm

255434	7.5	危険	Haxx アップルサイバートラスト株式会社レッドハット	-	cURL および libcurl における、任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2417	2010-04-13 14:46	2009-08-12	Show	GitHub Exploit DB Packet Storm

255435	6.8	警告	Haxx アップルサイバートラスト株式会社レッドハット	-	curl および libcurl の redirect 実装における任意のコマンドを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-0037	2010-04-13 14:45	2009-03-3	Show	GitHub Exploit DB Packet Storm

255436	9.3	危険	ジャストシステム	-	一太郎シリーズにおける任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1424	2010-04-12 15:32	2010-04-12	Show	GitHub Exploit DB Packet Storm

255437	4.4	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1030	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

255438	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter Config HICP におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4462	2010-04-12 12:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

255439	7.5	危険	The PHP Group	-	PHP のセッション拡張子における open_basedir または safe_mode 制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1130	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

255440	4.3	警告	Zope Foundation	-	Zope におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1104	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222451	8.8	HIGH Network	linuxfoundation pivotal	harbor vmware_harbor_registry	Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.	CWE-352 Origin Validation Error	CVE-2019-19025	2024-11-21 13:34	2020-03-20	Show	GitHub Exploit DB Packet Storm

222452	8.8	HIGH Network	linuxfoundation pivotal	harbor vmware_harbor_registry	Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.	NVD-CWE-noinfo	CVE-2019-19023	2024-11-21 13:34	2020-03-20	Show	GitHub Exploit DB Packet Storm

222453	6.1	MEDIUM Network	ovirt redhat	ovirt-engine virtualization	A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This fla…	CWE-79 Cross-site Scripting	CVE-2019-19336	2024-11-21 13:34	2020-03-19	Show	GitHub Exploit DB Packet Storm

222454	7.0	HIGH Local	redhat	openshift	An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd …	-	CVE-2019-19355	2024-11-21 13:34	2020-03-19	Show	GitHub Exploit DB Packet Storm

222455	7.0	HIGH Local	redhat	openshift	An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and esc…	-	CVE-2019-19351	2024-11-21 13:34	2020-03-19	Show	GitHub Exploit DB Packet Storm

222456	4.4	MEDIUM Local	redhat	openshift	During installation of an OpenShift 4 cluster, the `openshift-install` command line tool creates an `auth` directory, with `kubeconfig` and `kubeadmin-password` files. Both files contain credentials …	-	CVE-2019-19335	2024-11-21 13:34	2020-03-19	Show	GitHub Exploit DB Packet Storm

222457	7.2	HIGH Network	sangoma	freepbx	In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6 modules have a Remote Command Execution vulnerability that results in Privilege Escalation.	NVD-CWE-noinfo	CVE-2019-19538	2024-11-21 13:34	2020-03-17	Show	GitHub Exploit DB Packet Storm

222458	5.4	MEDIUM Network	teampasswordmanager	team_password_manager	Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title.	CWE-79 Cross-site Scripting	CVE-2019-19461	2024-11-21 13:34	2020-03-17	Show	GitHub Exploit DB Packet Storm

222459	9.8	CRITICAL Network	dolibarr	dolibarr	Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen).	CWE-79 Cross-site Scripting	CVE-2019-19212	2024-11-21 13:34	2020-03-17	Show	GitHub Exploit DB Packet Storm

222460	7.4	HIGH Network	opcfoundation	ua-.netstandard netstandard.opc.ua	In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle att…	CWE-330 Use of Insufficiently Random Values	CVE-2019-19135	2024-11-21 13:34	2020-03-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed