Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256061 4.3 警告 サイバートラスト株式会社
レッドハット
- Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性 - CVE-2006-7176 2010-04-27 15:18 2007-03-27 Show GitHub Exploit DB Packet Storm
256062 6.9 警告 アップル - Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性 CWE-362
競合状態
CVE-2010-0532 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
256063 4.3 警告 アップル - Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0531 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
256064 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0536 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
256065 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0529 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
256066 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0528 2010-04-26 16:58 2010-03-31 Show GitHub Exploit DB Packet Storm
256067 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0527 2010-04-26 16:58 2010-03-31 Show GitHub Exploit DB Packet Storm
256068 5 警告 アップル
サイバートラスト株式会社
Ruby-lang.org
レッドハット
- Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-1904 2010-04-26 16:46 2009-06-9 Show GitHub Exploit DB Packet Storm
256069 6.9 警告 アップル
Vim
- Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性 CWE-Other
その他
CVE-2009-0316 2010-04-26 16:45 2009-01-28 Show GitHub Exploit DB Packet Storm
256070 9.3 危険 アップル
サイバートラスト株式会社
Vim
レッドハット
- Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-4101 2010-04-26 16:45 2008-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223381 5.3 MEDIUM
Network
cbc gem The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics. CWE-311
Missing Encryption of Sensitive Data
CVE-2019-19464 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223382 5.3 MEDIUM
Network
huami mi_fit The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2019-19463 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223383 5.5 MEDIUM
Local
linux
netapp
canonical
opensuse
debian
linux_kernel
active_iq_unified_manager
solidfire
hci_management_node
hci_storage_node
hci_compute_node
ubuntu_linux
leap
debian_linux
relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result. CWE-476
 NULL Pointer Dereference
CVE-2019-19462 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223384 5.5 MEDIUM
Local
gnome
fedoraproject
opensuse
dia
fedora
leap
When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-19451 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223385 7.5 HIGH
Network
omniosce omnios illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg concurrently over a single socket, because uts/common/inet… CWE-20
 Improper Input Validation 
CVE-2019-19396 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223386 7.8 HIGH
Local
linux linux_kernel In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c. CWE-787
 Out-of-bounds Write
CVE-2019-19378 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223387 7.8 HIGH
Local
linux
netapp
linux_kernel
cloud_backup
steelstore_cloud_integrated_storage
active_iq_unified_manager
solidfire_baseboard_management_controller
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. CWE-416
 Use After Free
CVE-2019-19377 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223388 9.1 CRITICAL
Network
luajit
moonjit_project
luajit
moonjit
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases in… CWE-843
Type Confusion
CVE-2019-19391 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223389 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplan_uuid parameter. CWE-79
Cross-site Scripting
CVE-2019-19388 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223390 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter. CWE-79
Cross-site Scripting
CVE-2019-19387 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm