Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255621	7.8	危険	シスコシステムズ	-	Cisco IOS の H.323 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2828	2010-10-12 16:35	2010-09-22	Show	GitHub Exploit DB Packet Storm

255622	6.8	警告	竹村喜人(たけちん)	-	Lhasa における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-2369	2010-10-12 11:03	2010-10-12	Show	GitHub Exploit DB Packet Storm

255623	6.8	警告	Schezo	-	Lhaplus における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2010-2368	2010-10-12 11:02	2010-10-12	Show	GitHub Exploit DB Packet Storm

255624	6.8	警告	アップル	-	Apple Mac OS X の Apple Filing Protocol Server におけるパスワード要求を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-1820	2010-10-8 17:08	2010-09-21	Show	GitHub Exploit DB Packet Storm

255625	5	警告	マイクロソフト	-	Microsoft .NET Framework における View State フォームデータを復号または変更される脆弱性	CWE-310 暗号の問題	CVE-2010-3332	2010-10-8 17:07	2010-09-17	Show	GitHub Exploit DB Packet Storm

255626	2.6	注意	IBM	-	IBM WebSphere Application Server の Web コンテナにおける重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0777	2010-10-8 17:05	2010-05-8	Show	GitHub Exploit DB Packet Storm

255627	5	警告	IBM	-	IBM WebSphere Application Server の Web コンテナにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0776	2010-10-8 17:04	2010-05-8	Show	GitHub Exploit DB Packet Storm

255628	5	警告	Drupal サイバートラスト株式会社	-	Drupal の OpenID モジュールにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-3686	2010-10-7 16:40	2010-08-11	Show	GitHub Exploit DB Packet Storm

255629	5	警告	Drupal サイバートラスト株式会社	-	Drupal の OpenID モジュールにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-3685	2010-10-7 16:39	2010-08-11	Show	GitHub Exploit DB Packet Storm

255630	5	警告	Drupal サイバートラスト株式会社	-	Drupal の OpenID モジュールにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-3091	2010-10-7 16:39	2010-08-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220331	8.8	HIGH Network	zte	zxhn_f670_firmware	All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerabi…	CWE-78 OS Command	CVE-2019-3417	2024-11-21 13:42	2019-08-16	Show	GitHub Exploit DB Packet Storm

220332	7.1	HIGH Network	mcafee	web_gateway	Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains …	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2019-3639	2024-11-21 13:42	2019-08-15	Show	GitHub Exploit DB Packet Storm

220333	6.7	MEDIUM Local	mcafee	file_and_removable_media_protection	Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges.	NVD-CWE-noinfo	CVE-2019-3637	2024-11-21 13:42	2019-08-15	Show	GitHub Exploit DB Packet Storm

220334	6.5	MEDIUM Network	mcafee	web_gateway	Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user…	NVD-CWE-noinfo	CVE-2019-3635	2024-11-21 13:42	2019-08-15	Show	GitHub Exploit DB Packet Storm

220335	7.8	HIGH Local	dell	digital_delivery	Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by …	CWE-22 CWE-362 Path Traversal Race Condition	CVE-2019-3744	2024-11-21 13:42	2019-08-10	Show	GitHub Exploit DB Packet Storm

220336	7.8	HIGH Local	dell	digital_delivery	Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserial…	NVD-CWE-noinfo	CVE-2019-3742	2024-11-21 13:42	2019-08-10	Show	GitHub Exploit DB Packet Storm

220337	7.8	HIGH Local	pivotal apigee newrelic microsoft appdynamics bluemedora contrastsecurity cyberark datadoghq datastax dynatrace forgerock google ibm pagerduty riverbed signalsciences wavefront tibco solace snyk samba splunk sumologic synopsys yugabyte anynines	cloud_foundry_notifications cloud_foundry_log_cache_release cloud_foundry_deployment_concourse_tasks cloud_foundry_deployment cloud_foundry_smoke_test cloud_foundry_routing_release …	CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated mali…	CWE-200 Information Exposure	CVE-2019-3800	2024-11-21 13:42	2019-08-6	Show	GitHub Exploit DB Packet Storm

220338	6.8	MEDIUM Physics	dell	chengming_3967_firmware chengming_3977_firmware chengming_3980_firmware g3_3579_firmware g3_3779_firmware g5_5587_firmware g5_5590_firmware g7_7588_firmware g7_7590_firmware	Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure …	NVD-CWE-noinfo	CVE-2019-3717	2024-11-21 13:42	2019-08-6	Show	GitHub Exploit DB Packet Storm

220339	8.1	HIGH Network	gnome redhat	evolution-ews enterprise_linux	It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting t…	CWE-295 Improper Certificate Validation	CVE-2019-3890	2024-11-21 13:42	2019-08-1	Show	GitHub Exploit DB Packet Storm

220340	5.4	MEDIUM Network	redhat	openshift	A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. V…	-	CVE-2019-3884	2024-11-21 13:42	2019-08-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed