Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256291	6.8	警告	アップル GNU Project サン・マイクロシステムズサイバートラスト株式会社レッドハット	-	GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-4131	2010-01-18 12:21	2007-08-23	Show	GitHub Exploit DB Packet Storm

256292	4.6	警告	IBM	-	IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4150	2010-01-15 14:10	2009-12-2	Show	GitHub Exploit DB Packet Storm

256293	2.1	注意	サン・マイクロシステムズ	-	Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4080	2010-01-15 14:10	2009-11-24	Show	GitHub Exploit DB Packet Storm

256294	5	警告	サン・マイクロシステムズ	-	Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4075	2010-01-15 14:09	2009-11-23	Show	GitHub Exploit DB Packet Storm

256295	2.6	注意	オラクル	-	Oracle Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-01-14 15:01	2010-01-14	Show	GitHub Exploit DB Packet Storm

256296	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer に脆弱性	CWE-94 コード・インジェクション	CVE-2009-3672	2010-01-14 12:08	2009-11-25	Show	GitHub Exploit DB Packet Storm

256297	9.3	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の java.lang パッケージにおける脆弱性	CWE-362 競合状態	CVE-2009-2724	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

256298	10	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の Provider クラスにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-2721	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

256299	5	警告	有限会社シースリー	-	WebCalenderC3 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0348	2010-01-12 15:01	2010-01-12	Show	GitHub Exploit DB Packet Storm

256300	4.3	警告	有限会社シースリー	-	WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0349	2010-01-12 15:00	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221991	9.8	CRITICAL Network	cisco	ip_phone_8821_firmware ip_phone_8821-ex_firmware ip_conference_phone_7800_firmware ip_phone_8800_firmware unified_ip_conferenece_phone_8831_firmware	A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remot…	CWE-20 Improper Input Validation	CVE-2019-1716	2024-11-21 13:37	2019-03-23	Show	GitHub Exploit DB Packet Storm

221992	9.8	CRITICAL Network	cisco	common_services_platform_collector	A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static pass…	CWE-798 Use of Hard-coded Credentials	CVE-2019-1723	2024-11-21 13:37	2019-03-14	Show	GitHub Exploit DB Packet Storm

221993	5.4	MEDIUM Network	cisco	dna_center	A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based …	CWE-79 Cross-site Scripting	CVE-2019-1707	2024-11-21 13:37	2019-03-12	Show	GitHub Exploit DB Packet Storm

221994	6.1	MEDIUM Network	cisco	enterprise_chat_and_email	Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack agains…	CWE-79 Cross-site Scripting	CVE-2019-1702	2024-11-21 13:37	2019-03-12	Show	GitHub Exploit DB Packet Storm

221995	6.5	MEDIUM Adjacent	cisco	application_policy_infrastructure_controller	A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an a…	NVD-CWE-Other	CVE-2019-1690	2024-11-21 13:37	2019-03-12	Show	GitHub Exploit DB Packet Storm

221996	8.8	HIGH Network	cisco	webex_meetings webex_meetings_online webex_productivity_tools	A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as …	CWE-78 OS Command	CVE-2019-1674	2024-11-21 13:37	2019-03-1	Show	GitHub Exploit DB Packet Storm

221997	9.8	CRITICAL Network	cisco	rv110w_firmware rv130w_firmware rv215w_firmware	A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow…	CWE-787 Out-of-bounds Write	CVE-2019-1663	2024-11-21 13:37	2019-03-1	Show	GitHub Exploit DB Packet Storm

221998	7.8	HIGH Local	google debian canonical	android debian_linux ubuntu_linux	In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privi…	CWE-415 Double Free	CVE-2019-1999	2024-11-21 13:37	2019-03-1	Show	GitHub Exploit DB Packet Storm

221999	5.5	MEDIUM Local	google	android	In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that is not fixed by a factory reset, with n…	NVD-CWE-noinfo	CVE-2019-1998	2024-11-21 13:37	2019-03-1	Show	GitHub Exploit DB Packet Storm

222000	7.5	HIGH Network	google	android	In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information disclosure via an insecure wireless connection wi…	CWE-330 Use of Insufficiently Random Values	CVE-2019-1997	2024-11-21 13:37	2019-03-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed