Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256131 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
256132 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
256133 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
256134 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
256135 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
256136 9.3 危険 マイクロソフト - Microsoft Internet Explorer において任意のコードが実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0249 2010-02-19 14:21 2010-01-15 Show GitHub Exploit DB Packet Storm
256137 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0227 2010-02-19 11:37 2008-01-10 Show GitHub Exploit DB Packet Storm
256138 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
256139 7.5 危険 Linux
レッドハット		 - Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
256140 7.8 危険 Linux
レッドハット		 - Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222591 8.8 HIGH
Network 		sa-exim_project
debian
canonical 		sa-exim
debian_linux
ubuntu_linux 		sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval (rather than direct parsing and/or use of the taint … CWE-78
OS Command  		CVE-2019-19920 2024-11-21 13:35 2019-12-23 Show GitHub Exploit DB Packet Storm
222592 9.8 CRITICAL
Network 		handlebars.js_project
tenable 		handlebars.js
tenable.sc 		Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allo… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2019-19919 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222593 7.8 HIGH
Local 		lout_project
opensuse
fedoraproject 		lout
leap
fedora
backports_sle 		Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. CWE-787
 Out-of-bounds Write 		CVE-2019-19918 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222594 7.8 HIGH
Local 		lout_project
opensuse
fedoraproject 		lout
leap
backports_sle
fedora 		Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. CWE-120
Classic Buffer Overflow 		CVE-2019-19917 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222595 9.8 CRITICAL
Network 		neuvector neuvector NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwords which allows an attacker with access to the Neuvector portal to authenticate as any va… CWE-521
Weak Password Requirements  		CVE-2019-19747 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222596 6.1 MEDIUM
Network 		midori-browser midori In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the multipart/x-mixed-replace MIME type. This could result… CWE-79
Cross-site Scripting 		CVE-2019-19916 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222597 7.1 HIGH
Local 		trendmicro antivirus\+_security_2020
internet_security_2020
maximum_security_2020
premium_security_2020 		The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to disclose sensitive information or to create a denial-of-service condition on af… CWE-59
Link Following 		CVE-2019-19693 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222598 6.1 MEDIUM
Network 		trendmicro apex_one Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that the Japanese version of the product is NOT affected. CWE-79
Cross-site Scripting 		CVE-2019-19692 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222599 4.9 MEDIUM
Network 		trendmicro apex_one
officescan 		A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must … NVD-CWE-noinfo
CVE-2019-19691 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
222600 6.1 MEDIUM
Network 		ciprianmp phpmychat-plus phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable. CWE-79
Cross-site Scripting 		CVE-2019-19908 2024-11-21 13:35 2019-12-20 Show GitHub Exploit DB Packet Storm