Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255951	7.5	危険	オラクル	-	Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0897	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

255952	10	危険	オラクル	-	Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0888	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

255953	5	警告	サン・マイクロシステムズ Pidgin レッドハット	-	Pidgin の gtkimhtml.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0423	2010-05-14 18:39	2010-02-18	Show	GitHub Exploit DB Packet Storm

255954	4.3	警告	サン・マイクロシステムズ Pidgin レッドハット	-	Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0420	2010-05-14 18:38	2010-02-18	Show	GitHub Exploit DB Packet Storm

255955	7.5	危険	Carnegie Mellon University (Project Cyrus) アップルサイバートラスト株式会社サン・マイクロシステムズオラクルレッドハット	-	Cyrus SASL ライブラリにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0688	2010-05-14 18:37	2009-05-15	Show	GitHub Exploit DB Packet Storm

255956	7.5	危険	サン・マイクロシステムズ GNOME Project レッドハット	-	Evolution Data Server (別名 evolution-data-server) における複数の整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0587	2010-05-14 18:37	2009-03-14	Show	GitHub Exploit DB Packet Storm

255957	5.8	警告	サン・マイクロシステムズ GNOME Project レッドハット	-	Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0582	2010-05-14 18:37	2009-03-14	Show	GitHub Exploit DB Packet Storm

255958	1.2	注意	日本電気サイバートラスト株式会社サン・マイクロシステムズターボリナックス OpenSSL Project レッドハット	-	RSA key reconstruction vulnerability	-	CVE-2007-3108	2010-05-14 18:37	2007-08-16	Show	GitHub Exploit DB Packet Storm

255959	5	警告	ヒューレット・パッカードサイバートラスト株式会社 OpenSSL Project ターボリナックスレッドハット	-	OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4355	2010-05-13 17:21	2010-01-13	Show	GitHub Exploit DB Packet Storm

255960	9.3	危険	日立	-	XMAP3 における任意のコードが実行される脆弱性	CWE-noinfo 情報不足	-	2010-05-13 15:14	2010-04-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225071	7.5	HIGH Network	spin-rs_project	spin-rs	An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclus…	CWE-662 Improper Synchronization	CVE-2019-16137	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225072	6.5	MEDIUM Network	weaver	eteams_oa	An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Spec…	CWE-613 Insufficient Session Expiration	CVE-2019-16133	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225073	6.5	MEDIUM Network	phpok	oklite	An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring.	CWE-22 Path Traversal	CVE-2019-16132	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225074	8.8	HIGH Network	phpok	oklite	framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-16131	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225075	6.1	MEDIUM Network	hgw168cc	yii-cms	YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.	CWE-79 Cross-site Scripting	CVE-2019-16130	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225076	6.1	MEDIUM Network	getgrav	grav_cms	Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.	CWE-79 Cross-site Scripting	CVE-2019-16126	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225077	9.8	CRITICAL Network	jobberbase	jobberbase	In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.	CWE-89 SQL Injection	CVE-2019-16125	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225078	9.8	CRITICAL Network	youphptube	youphptube	In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.	CWE-862 Missing Authorization	CVE-2019-16124	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225079	7.5	HIGH Network	kartatopia	piluscart	In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.	CWE-22 Path Traversal	CVE-2019-16123	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225080	8.8	HIGH Network	tri	event_tickets	CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-16120	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm