Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255641	6.8	警告	マイクロソフト	-	Windows 上で稼働する Microsoft Internet Information Services におけるアクセス制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-2731	2010-10-6 16:54	2010-09-14	Show	GitHub Exploit DB Packet Storm

255642	9.3	危険	マイクロソフト	-	Microsoft Internet Information Services におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2730	2010-10-5 19:00	2010-09-14	Show	GitHub Exploit DB Packet Storm

255643	4.3	警告	マイクロソフト	-	Microsoft Internet Information Services の ASP 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-1899	2010-10-5 18:59	2010-09-14	Show	GitHub Exploit DB Packet Storm

255644	9.3	危険	マイクロソフト	-	Microsoft Outlook におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2728	2010-10-5 18:59	2010-09-14	Show	GitHub Exploit DB Packet Storm

255645	9.3	危険	マイクロソフト	-	Microsoft Windows の USP10.DLL 内の Uniscribe 実装における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2738	2010-10-5 18:58	2010-09-14	Show	GitHub Exploit DB Packet Storm

255646	9.3	危険	マイクロソフト	-	Microsoft Windows の MPEG-4 コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0818	2010-10-5 18:58	2010-09-14	Show	GitHub Exploit DB Packet Storm

255647	9.3	危険	マイクロソフト	-	Microsoft Windows の Print Spooler サービスにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2729	2010-10-5 18:57	2010-09-14	Show	GitHub Exploit DB Packet Storm

255648	1.7	注意	IBM	-	IBM AIX の sa_snap におけるファイルを削除される脆弱性	CWE-noinfo 情報不足	CVE-2010-3406	2010-10-5 18:57	2010-08-6	Show	GitHub Exploit DB Packet Storm

255649	6.8	警告	IBM	-	IBM AIX および VIOS の sa_snap におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3405	2010-10-5 18:56	2010-08-6	Show	GitHub Exploit DB Packet Storm

255650	4.3	警告	有限会社のれんずプロ	-	AD-EDIT2 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2367	2010-10-5 11:02	2010-10-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218581	7.5	HIGH Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.	CWE-22 Path Traversal	CVE-2019-6240	2024-11-21 13:46	2019-03-26	Show	GitHub Exploit DB Packet Storm

218582	8.8	HIGH Network	risi	gestao_de_horarios	RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.	CWE-89 SQL Injection	CVE-2019-6491	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218583	9.8	CRITICAL Network	blogengine	blogengine.net	An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx componen…	CWE-22 Path Traversal	CVE-2019-6714	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218584	5.9	MEDIUM Network	mastercard	qkr\!_with_masterpass	The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier.	CWE-295 Improper Certificate Validation	CVE-2019-6702	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218585	7.5	HIGH Network	python debian opensuse suse canonical	python-gnupg debian_linux leap backports ubuntu_linux	python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and …	CWE-20 Improper Input Validation	CVE-2019-6690	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218586	5.5	MEDIUM Local	qemu fedoraproject	qemu fedora	In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-6501	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218587	5.5	MEDIUM Local	iobit	smart_defrag	SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can b…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-6492	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218588	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wi…	CWE-352 Origin Validation Error	CVE-2019-6282	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218589	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, …	NVD-CWE-noinfo	CVE-2019-6279	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

218590	8.8	HIGH Network	gl-inet	gl-ar300m-lite_firmware	Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.	CWE-77 Command Injection	CVE-2019-6275	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed