Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255831 6.8 警告 アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
OpenSSL Project
レッドハット
- OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性 CWE-189
数値処理の問題
CVE-2007-5135 2010-01-5 13:31 2007-10-12 Show GitHub Exploit DB Packet Storm
255832 7.8 危険 マイクロソフト - Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1928 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255833 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255834 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255835 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255836 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
255837 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
255838 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
255839 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219301 7.2 HIGH
Network
redhat ansible_tower When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks co… CWE-200
Information Exposure
CVE-2019-3869 2024-11-21 13:42 2019-03-28 Show GitHub Exploit DB Packet Storm
219302 7.5 HIGH
Network
gnu
fedoraproject
gnutls
fedora
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifi… CWE-415
CWE-416
 Double Free
 Use After Free
CVE-2019-3829 2024-11-21 13:42 2019-03-28 Show GitHub Exploit DB Packet Storm
219303 6.1 MEDIUM
Network
mod_auth_mellon_project
fedoraproject
redhat
canonical
mod_auth_mellon
fedora
enterprise_linux
ubuntu_linux
A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the brows… CWE-601
Open Redirect
CVE-2019-3877 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm
219304 4.8 MEDIUM
Network
moodle moodle A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboar… CWE-79
Cross-site Scripting
CVE-2019-3847 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm
219305 6.3 MEDIUM
Network
redhat
opensuse
libvirt
leap
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash li… CWE-476
 NULL Pointer Dereference
CVE-2019-3840 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm
219306 4.2 MEDIUM
Local
redhat ansible Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible cont… CWE-22
Path Traversal
CVE-2019-3828 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm
219307 7.5 HIGH
Network
ceph
canonical
civetweb
ubuntu_linux
A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaus… CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2019-3821 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm
219308 8.8 HIGH
Network
rpm libcomps A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be abl… CWE-416
 Use After Free
CVE-2019-3817 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm
219309 6.8 MEDIUM
Network
dovecot
canonical
opensuse
dovecot
ubuntu_linux
leap
It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty username field could … CWE-295
Improper Certificate Validation 
CVE-2019-3814 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm
219310 4.3 MEDIUM
Network
moodle moodle A vulnerability was found in moodle before version 3.6.3. The get_with_capability_join and get_users_by_capability functions were not taking context freezing into account when checking user capabilit… NVD-CWE-noinfo
CVE-2019-3852 2024-11-21 13:42 2019-03-27 Show GitHub Exploit DB Packet Storm