Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256481	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0029	2010-03-2 11:26	2010-02-9	Show	GitHub Exploit DB Packet Storm

256482	10	危険	マイクロソフト	-	Microsoft Office の MSO.DLL におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0243	2010-03-1 11:37	2010-02-9	Show	GitHub Exploit DB Packet Storm

256483	9.3	危険	マイクロソフト	-	Microsoft DirectX の DirectShow におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0250	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

256484	7.8	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0242	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

256485	10	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0241	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

256486	10	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0240	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

256487	10	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0239	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

256488	9.3	危険	マイクロソフト	-	Microsoft Windows の SMB クライアント実装における権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0017	2010-03-1 11:35	2010-02-9	Show	GitHub Exploit DB Packet Storm

256489	9.3	危険	マイクロソフト	-	Microsoft Windows の SMB クライアント実装における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0016	2010-03-1 11:35	2010-02-9	Show	GitHub Exploit DB Packet Storm

256490	5	警告	日立	-	uCosminexus Portal Framework におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-02-26 11:36	2010-01-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219441	5.4	MEDIUM Network	twitter	twitter_kit	This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulnerable to a callback verification flaw in the "Login with Twitter" component allo…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-5431	2024-11-21 13:44	2019-05-7	Show	GitHub Exploit DB Packet Storm

219442	7.8	HIGH Local	filezilla-project debian fedoraproject	filezilla_client debian_linux fedora	Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.	CWE-426 Untrusted Search Path	CVE-2019-5429	2024-11-21 13:44	2019-04-30	Show	GitHub Exploit DB Packet Storm

219443	7.5	HIGH Network	mchange fedoraproject oracle	c3p0 fedora retail_xstore_point_of_service flexcube_private_banking webcenter_sites communications_ip_service_activator hyperion_infrastructure_technology enterprise_manager_ops_…	c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.	CWE-776 XML Entity Expansion	CVE-2019-5427	2024-11-21 13:44	2019-04-23	Show	GitHub Exploit DB Packet Storm

219444	7.5	HIGH Network	qemu	qemu	hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.	CWE-476 NULL Pointer Dereference	CVE-2019-5008	2024-11-21 13:44	2019-04-20	Show	GitHub Exploit DB Packet Storm

219445	7.6	HIGH Physics	capsuletech	smartlinx_neuron_2_firmware	A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A …	NVD-CWE-noinfo	CVE-2019-5024	2024-11-21 13:44	2019-04-12	Show	GitHub Exploit DB Packet Storm

219446	4.8	MEDIUM Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without c…	CWE-287 Improper Authentication	CVE-2019-5426	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

219447	8.8	HIGH Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privile…	CWE-78 OS Command	CVE-2019-5425	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

219448	8.8	HIGH Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user.	CWE-78 OS Command	CVE-2019-5424	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

219449	7.5	HIGH Network	http-live-simulator_project	http-live-simulator	Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.	CWE-22 Path Traversal	CVE-2019-5423	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

219450	6.1	MEDIUM Network	buttle_project	buttle	XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.	CWE-79 Cross-site Scripting	CVE-2019-5422	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed