Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256461	4.3	警告	アドビシステムズ	-	Adobe BlazeDS における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-3960	2010-03-5 10:32	2010-02-11	Show	GitHub Exploit DB Packet Storm

256462	6.8	警告	Linux レッドハット	-	KVM の pit_ioport_read 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-16 環境設定	CVE-2010-0309	2010-03-4 13:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

256463	4.1	警告	Linux レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0306	2010-03-4 13:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

256464	5	警告	レッドハットリアルネットワークス	-	RealNetworks HelixPlayer および RealPlayer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0417	2010-03-4 13:40	2010-02-18	Show	GitHub Exploit DB Packet Storm

256465	7.5	危険	レッドハットリアルネットワークス	-	RealNetworks HelixPlayer および RealPlayer の Unescape 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0416	2010-03-4 13:40	2010-02-18	Show	GitHub Exploit DB Packet Storm

256466	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Paint における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0028	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256467	7.2	危険	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-Other その他	CVE-2010-0233	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256468	6.3	警告	マイクロソフト	-	Microsoft Windows の KDC におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0035	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256469	7.1	危険	マイクロソフト	-	Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-0021	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256470	10	危険	マイクロソフト	-	Microsoft Windows の SMB 実装におけるアクセス権を取得される脆弱性	CWE-264 CWE-310	CVE-2010-0231	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224271	6.1	MEDIUM Network	hexo-admin_project	hexo-admin	The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.	CWE-79 Cross-site Scripting	CVE-2019-17606	2024-11-21 13:32	2019-10-24	Show	GitHub Exploit DB Packet Storm

224272	4.3	MEDIUM Network	qt debian	qtbase debian_linux	An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-18281	2024-11-21 13:32	2019-10-24	Show	GitHub Exploit DB Packet Storm

224273	8.8	HIGH Network	online_grading_system_project	online_grading_system	Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into exe…	CWE-352 Origin Validation Error	CVE-2019-18280	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224274	7.8	HIGH Local	videolan	vlc_media_player	When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. NOTE: the …	NVD-CWE-noinfo	CVE-2019-18278	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224275	8.8	HIGH Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via s…	CWE-352 Origin Validation Error	CVE-2019-18220	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224276	7.5	HIGH Network	haproxy	haproxy	A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if co…	CWE-444 HTTP Request Smuggling	CVE-2019-18277	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224277	6.1	MEDIUM Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection with…	CWE-79 Cross-site Scripting	CVE-2019-18219	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224278	7.8	HIGH Local	nipper-ng_project	nipper-ng	A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Ex…	CWE-787 Out-of-bounds Write	CVE-2019-17424	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

224279	7.5	HIGH Network	universal_office_converter_project	universal_office_converter	The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-17400	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

224280	8.1	HIGH Network	libssh2 fedoraproject opensuse debian netapp	libssh2 fedora leap debian_linux element_software ontap_select_deploy_administration_utility solidfire hci_management_node active_iq_unified_manager bootstrap_os	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s…	CWE-190 Integer Overflow or Wraparound	CVE-2019-17498	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed