Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256561 7.6 危険 GNOME Project
レッドハット		 - Evince の TFM フォントパーサにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2643 2011-01-26 15:32 2011-01-5 Show GitHub Exploit DB Packet Storm
256562 7.6 危険 GNOME Project
レッドハット		 - Evince の AFM フォントパーサにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2642 2011-01-26 15:30 2011-01-5 Show GitHub Exploit DB Packet Storm
256563 7.6 危険 GNOME Project
レッドハット		 - Evince の VF フォントパーサにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2641 2011-01-26 15:21 2011-01-5 Show GitHub Exploit DB Packet Storm
256564 7.6 危険 GNOME Project
レッドハット		 - Evince の PK フォントパーサにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2640 2011-01-26 15:10 2011-01-5 Show GitHub Exploit DB Packet Storm
256565 5 警告 MODX - MODx Evolution におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3930 2011-01-26 14:02 2011-01-26 Show GitHub Exploit DB Packet Storm
256566 7.5 危険 MODX - MODx Evolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3929 2011-01-26 14:01 2011-01-26 Show GitHub Exploit DB Packet Storm
256567 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4042 2011-01-26 13:28 2010-10-19 Show GitHub Exploit DB Packet Storm
256568 6.8 警告 Google - Linux 上で稼働する Google Chrome のサンドボックス実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4041 2011-01-26 13:26 2010-10-19 Show GitHub Exploit DB Packet Storm
256569 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-4040 2011-01-26 13:23 2010-10-19 Show GitHub Exploit DB Packet Storm
256570 7.5 危険 Google - Linux 上で稼働する Google Chrome における脆弱性 CWE-DesignError
CWE-noinfo
CVE-2010-4039 2011-01-26 13:17 2010-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222241 4.8 MEDIUM
Network 		phpmywind phpmywind admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header. CWE-79
Cross-site Scripting 		CVE-2019-8435 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222242 6.1 MEDIUM
Network 		cmseasy cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter. CWE-79
Cross-site Scripting 		CVE-2019-8434 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222243 7.5 HIGH
Network 		jtbc jtbc_php JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8433 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222244 6.1 MEDIUM
Network 		cmseasy cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter. CWE-79
Cross-site Scripting 		CVE-2019-8432 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222245 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter. CWE-89
SQL Injection 		CVE-2019-8429 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222246 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value. CWE-89
SQL Injection 		CVE-2019-8428 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222247 9.8 CRITICAL
Network 		zoneminder zoneminder daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters. CWE-78
OS Command  		CVE-2019-8427 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222248 6.1 MEDIUM
Network 		zoneminder zoneminder skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter. CWE-79
Cross-site Scripting 		CVE-2019-8426 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222249 6.1 MEDIUM
Network 		zoneminder zoneminder includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages. CWE-79
Cross-site Scripting 		CVE-2019-8425 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
222250 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter. CWE-89
SQL Injection 		CVE-2019-8424 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm