Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256061	4.3	警告	サイバートラスト株式会社レッドハット	-	Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性	-	CVE-2006-7176	2010-04-27 15:18	2007-03-27	Show	GitHub Exploit DB Packet Storm

256062	6.9	警告	アップル	-	Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0532	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256063	4.3	警告	アップル	-	Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0531	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256064	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256065	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256066	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256067	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256068	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

256069	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

256070	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223911	8.8	HIGH Network	dlink	dir-615_firmware	The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-17525	2024-11-21 13:32	2020-04-22	Show	GitHub Exploit DB Packet Storm

223912	7.5	HIGH Network	fortinet	fortiap-w2 fortiap-s fortiswitch fortianalyzer fortimanager	An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an…	CWE-400 Uncontrolled Resource Consumption	CVE-2019-17657	2024-11-21 13:32	2020-04-8	Show	GitHub Exploit DB Packet Storm

223913	9.8	CRITICAL Network	apache	dubbo	Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance o…	CWE-502 Deserialization of Untrusted Data	CVE-2019-17564	2024-11-21 13:32	2020-04-2	Show	GitHub Exploit DB Packet Storm

223914	7.5	HIGH Network	apache oracle	netbeans graalvm	The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and includin…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2019-17561	2024-11-21 13:32	2020-03-31	Show	GitHub Exploit DB Packet Storm

223915	9.1	CRITICAL Network	apache oracle	netbeans graalvm	The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the downlo…	CWE-295 Improper Certificate Validation	CVE-2019-17560	2024-11-21 13:32	2020-03-31	Show	GitHub Exploit DB Packet Storm

223916	5.4	MEDIUM Network	netapp	oncommand_system_manager	OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scr…	CWE-79 Cross-site Scripting	CVE-2019-17276	2024-11-21 13:32	2020-03-25	Show	GitHub Exploit DB Packet Storm

223917	7.5	HIGH Network	moxa	iologik_2512_firmware iologik_2512-t_firmware iologik_2512-hspa_firmware iologik_2512-hspa-t_firmware iologik_2512-wl1-eu_firmware iologik_2512-wl1-eu-t_firmware iologik_2512-wl1-us…	In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to f…	NVD-CWE-noinfo	CVE-2019-18242	2024-11-21 13:32	2020-03-25	Show	GitHub Exploit DB Packet Storm

223918	9.8	CRITICAL Network	apache debian	traffic_server debian_linux	There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and chunked encoding. Upgrade to versions 7.1.9 and 8.0.6 or later version…	CWE-444 HTTP Request Smuggling	CVE-2019-17565	2024-11-21 13:32	2020-03-24	Show	GitHub Exploit DB Packet Storm

223919	9.8	CRITICAL Network	apache debian	traffic_server debian_linux	There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and scheme parsing. Upgrade to versions 7.1.9 and 8.0.6 or later versions.	CWE-444 HTTP Request Smuggling	CVE-2019-17559	2024-11-21 13:32	2020-03-24	Show	GitHub Exploit DB Packet Storm

223920	8.8	HIGH Network	fortinet	fortimanager	An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH)…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-17654	2024-11-21 13:32	2020-03-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed