Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256381 7.2 危険 VMware - 複数の VMware 製品の vmrun における権限昇格の脆弱性 CWE-134
書式文字列の問題 		CVE-2010-1139 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
256382 5 警告 VMware - 複数の VMware 製品の仮想ネットワークスタックにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1138 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
256383 8.5 危険 VMware - 複数の VMware 製品の VMware Tools における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1142 2010-05-7 17:24 2010-04-9 Show GitHub Exploit DB Packet Storm
256384 8.5 危険 VMware - 複数の VMware 製品の VMware Tools における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1141 2010-05-7 17:24 2010-04-9 Show GitHub Exploit DB Packet Storm
256385 5 警告 アップル
サイバートラスト株式会社
レッドハット
ターボリナックス
CUPS		 - CUPS の ippReadIO 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0949 2010-05-7 16:55 2009-06-3 Show GitHub Exploit DB Packet Storm
256386 6.8 警告 レッドハット
サイバートラスト株式会社
ターボリナックス
CUPS		 - CUPS の TIFF イメージデコーディングルーチンにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0163 2010-05-7 16:51 2009-04-16 Show GitHub Exploit DB Packet Storm
256387 4.6 警告 GNU Project
サイバートラスト株式会社
レッドハット		 - GNU cpio における大きなサイズのファイル処理によるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2005-4268 2010-05-7 16:51 2005-12-15 Show GitHub Exploit DB Packet Storm
256388 4.3 警告 日本電気
Apache Software Foundation		 - Apache Xerces C++ におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-1885 2010-05-6 13:47 2009-08-6 Show GitHub Exploit DB Packet Storm
256389 6.4 警告 アップル
ターボリナックス
CUPS		 - CUPS における DNS リバインド攻撃を誘導される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0164 2010-05-6 13:46 2009-04-24 Show GitHub Exploit DB Packet Storm
256390 5 警告 freedesktop.org
日本電気
サイバートラスト株式会社
レッドハット		 - JBIG2 デコーダにおける SplashBitmap に関連する整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-1188 2010-05-6 13:46 2009-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225041 5.3 MEDIUM
Network 		mediawiki
fedoraproject
debian 		mediawiki
fedora
debian_linux 		In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup. CWE-862
 Missing Authorization 		CVE-2019-16738 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225042 7.5 HIGH
Network 		advantech webaccess\/hmi_designer Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-16901 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225043 7.5 HIGH
Network 		advantech webaccess\/hmi_designer Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c. NVD-CWE-noinfo
CVE-2019-16900 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225044 7.5 HIGH
Network 		advantech webaccess\/hmi_designer In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918. NVD-CWE-noinfo
CVE-2019-16899 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225045 5.5 MEDIUM
Local 		rubyzip_project
fedoraproject
redhat 		rubyzip
fedora
cloudforms 		In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of servic… NVD-CWE-noinfo
CVE-2019-16892 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225046 5.4 MEDIUM
Network 		halo halo Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments. CWE-79
Cross-site Scripting 		CVE-2019-16890 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225047 7.5 HIGH
Network 		ui er-x_firmware
er-x-sfp_firmware
ep-r6_firmware
erlite-3_firmware
erpoe-5_firmware
er-8_firmware
erpro-8_firmware
ep-r8_firmware
er-4_firmware
er-6p_firmware
er-12_firmwa… 		Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a vali… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-16889 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225048 7.8 HIGH
Local 		irfanview irfanview In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc. CWE-120
Classic Buffer Overflow 		CVE-2019-16887 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225049 7.5 HIGH
Network 		string-interner_project string-interner An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers, because of a cloning flaw. CWE-416
 Use After Free 		CVE-2019-16882 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
225050 7.5 HIGH
Network 		linuxfoundation
docker
fedoraproject
opensuse
redhat
canonical 		runc
docker
fedora
leap
enterprise_linux
openshift_container_platform
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
ubuntu_linux 		runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a m… CWE-863
 Incorrect Authorization 		CVE-2019-16884 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm