Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256071	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

256072	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

256073	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

256074	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

256075	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

256076	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

256077	6.9	警告	mielke レッドハット	-	brltty の libbrlttybba.so における権限昇格の脆弱性	CWE-264 CWE-Other	CVE-2008-3279	2010-04-21 17:47	2010-03-30	Show	GitHub Exploit DB Packet Storm

256078	4.3	警告	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0181	2010-04-20 16:42	2010-03-30	Show	GitHub Exploit DB Packet Storm

256079	5.8	警告	サイボウズ	-	複数のサイボウズ製品におけるアクセス制限に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2029	2010-04-20 12:01	2010-04-20	Show	GitHub Exploit DB Packet Storm

256080	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0805	2010-04-19 19:20	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223771	6.5	MEDIUM Network	imagemagick	imagemagick	ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.	CWE-674 Uncontrolled Recursion	CVE-2019-18853	2024-11-21 13:33	2019-11-12	Show	GitHub Exploit DB Packet Storm

223772	9.8	CRITICAL Network	dlink	dir-600_b1_firmware dir-615_j1_firmware dir-645_a1_firmware dir-815_a1_firmware dir-823_a1_firmware dir-842_c1_firmware dir-890l_a1_firmware	Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-18852	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

223773	5.5	MEDIUM Local	tnef_project fedoraproject canonical debian	tnef fedora ubuntu_linux debian_linux	In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-ba…	CWE-125 Out-of-bounds Read	CVE-2019-18849	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

223774	7.3	HIGH Network	chartkick	chartkick.js	Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.	NVD-CWE-noinfo	CVE-2019-18841	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

223775	7.5	HIGH Network	envoyproxy istio	envoy istio	Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-18836	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

223776	7.1	HIGH Local	patriotmemory	viper_rgb_firmware	The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT A…	CWE-269 Improper Privilege Management	CVE-2019-18845	2024-11-21 13:33	2019-11-10	Show	GitHub Exploit DB Packet Storm

223777	7.5	HIGH Network	wolfssl	wolfssl	In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow i…	CWE-787 Out-of-bounds Write	CVE-2019-18840	2024-11-21 13:33	2019-11-9	Show	GitHub Exploit DB Packet Storm

223778	9.8	CRITICAL Network	energycap	energycap	Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with acce…	CWE-269 Improper Privilege Management	CVE-2019-18623	2024-11-21 13:33	2019-11-9	Show	GitHub Exploit DB Packet Storm

223779	9.8	CRITICAL Network	matrix	synapse	Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-18835	2024-11-21 13:33	2019-11-8	Show	GitHub Exploit DB Packet Storm

223780	9.8	CRITICAL Network	strapi	strapi	strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2019-18818	2024-11-21 13:33	2019-11-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed