Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256291 6.8 警告 アップル
GNU Project
サン・マイクロシステムズ
サイバートラスト株式会社
レッドハット		 - GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4131 2010-01-18 12:21 2007-08-23 Show GitHub Exploit DB Packet Storm
256292 4.6 警告 IBM - IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4150 2010-01-15 14:10 2009-12-2 Show GitHub Exploit DB Packet Storm
256293 2.1 注意 サン・マイクロシステムズ - Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4080 2010-01-15 14:10 2009-11-24 Show GitHub Exploit DB Packet Storm
256294 5 警告 サン・マイクロシステムズ - Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4075 2010-01-15 14:09 2009-11-23 Show GitHub Exploit DB Packet Storm
256295 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
256296 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
256297 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
256298 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
256299 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
256300 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223181 5.4 MEDIUM
Network 		alfresco alfresco Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document. CWE-79
Cross-site Scripting 		CVE-2019-19496 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223182 5.4 MEDIUM
Network 		kentico kentico Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS. CWE-434
CWE-706
 Unrestricted Upload of File with Dangerous Type 
 Use of Incorrectly-Resolved Name or Reference 		CVE-2019-19493 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223183 6.5 MEDIUM
Network 		teamviewer teamviewer An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved wit… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2019-19362 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223184 6.5 MEDIUM
Network 		djangoproject
fedoraproject 		django
fedora 		Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. A Django model admin displaying inline related models, where the user has view-only permissions to a parent model but ed… CWE-276
Incorrect Default Permissions  		CVE-2019-19118 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223185 9.8 CRITICAL
Network 		freeswitch freeswitch FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-19492 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223186 6.1 MEDIUM
Network 		testlink testlink TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request. CWE-79
Cross-site Scripting 		CVE-2019-19491 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223187 7.3 HIGH
Local 		litemanager litemanager LiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server" folder, as demonstrated by ROMFUSClient.exe. CWE-276
Incorrect Default Permissions  		CVE-2019-19490 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223188 5.5 MEDIUM
Local 		smplayer smplayer SMPlayer 19.5.0 has a buffer overflow via a long .m3u file. CWE-120
Classic Buffer Overflow 		CVE-2019-19489 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223189 4.6 MEDIUM
Physics 		opensc_project opensc An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-19481 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
223190 4.6 MEDIUM
Physics 		opensc_project opensc An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry. CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2019-19480 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm