Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256831	9	危険	マイクロソフト	-	Microsoft Windows の SMB 実装における任意のコードを実行される脆弱性	CWE-20 CWE-94	CVE-2010-0020	2010-03-3 11:53	2010-02-9	Show	GitHub Exploit DB Packet Storm

256832	6.9	警告	マイクロソフト	-	Microsoft Windows の Client/Server Run-time Subsystem における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0023	2010-03-3 11:53	2010-02-9	Show	GitHub Exploit DB Packet Storm

256833	4	警告	マイクロソフト	-	Microsoft Windows の Hyper-V サーバ実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0026	2010-03-3 11:53	2010-02-9	Show	GitHub Exploit DB Packet Storm

256834	9.3	危険	日本電気アップル富士通古河電気工業ヒューレット・パッカードインターネットイニシアティブアラクサラネットワークス日立	-	IPv6 NDP 実装における Neighbor Discovery メッセージの送信元検証処理に関する脆弱性	CWE-20 不適切な入力確認	CVE-2008-2476	2010-03-3 11:43	2008-10-3	Show	GitHub Exploit DB Packet Storm

256835	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0034	2010-03-2 11:29	2010-02-9	Show	GitHub Exploit DB Packet Storm

256836	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0033	2010-03-2 11:28	2010-02-9	Show	GitHub Exploit DB Packet Storm

256837	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint における任意のコードを実行される脆弱性	CWE-94 CWE-Other	CVE-2010-0032	2010-03-2 11:28	2010-02-9	Show	GitHub Exploit DB Packet Storm

256838	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0031	2010-03-2 11:27	2010-02-9	Show	GitHub Exploit DB Packet Storm

256839	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0030	2010-03-2 11:27	2010-02-9	Show	GitHub Exploit DB Packet Storm

256840	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0029	2010-03-2 11:26	2010-02-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225351	4.3	MEDIUM Network	harriscomputer	ormed_mis	Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2Entrie…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2019-18626	2024-11-21 13:33	2020-03-26	Show	GitHub Exploit DB Packet Storm

225352	7.5	HIGH Network	bloq	univalue	UniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class internal data reaches an inconsistent state) via input data that triggers an error.	CWE-674 Uncontrolled Recursion	CVE-2019-18936	2024-11-21 13:33	2020-03-21	Show	GitHub Exploit DB Packet Storm

225353	6.1	MEDIUM Network	squid-cache debian canonical opensuse	squid debian_linux ubuntu_linux leap	Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.	CWE-74 Injection	CVE-2019-18860	2024-11-21 13:33	2020-03-21	Show	GitHub Exploit DB Packet Storm

225354	9.8	CRITICAL Network	sparkdevnetwork	rock_rms	Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.	NVD-CWE-noinfo	CVE-2019-18641	2024-11-21 13:33	2020-03-21	Show	GitHub Exploit DB Packet Storm

225355	7.5	HIGH Network	suitecrm	suitecrm	SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials.	CWE-522 Insufficiently Protected Credentials	CVE-2019-18785	2024-11-21 13:33	2020-03-20	Show	GitHub Exploit DB Packet Storm

225356	5.3	MEDIUM Network	salesagility	suitecrm	SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 does not correctly implement the .htaccess protection mechanism.	NVD-CWE-Other	CVE-2019-18782	2024-11-21 13:33	2020-03-20	Show	GitHub Exploit DB Packet Storm

225357	7.8	HIGH Local	claranova	adaware_antivirus	Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into …	NVD-CWE-noinfo	CVE-2019-18979	2024-11-21 13:33	2020-03-19	Show	GitHub Exploit DB Packet Storm

225358	7.2	HIGH Network	dell	emc_data_protection_advisor emc_integrated_data_protection_appliance_firmware	Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A…	CWE-94 Code Injection	CVE-2019-18582	2024-11-21 13:33	2020-03-19	Show	GitHub Exploit DB Packet Storm

225359	7.2	HIGH Network	dell	emc_data_protection_advisor emc_integrated_data_protection_appliance_firmware	Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A r…	CWE-862 Missing Authorization	CVE-2019-18581	2024-11-21 13:33	2020-03-19	Show	GitHub Exploit DB Packet Storm

225360	6.5	MEDIUM Network	hp	envy_5000_m2u85a_firmware envy_5000_m2u85b_firmware envy_5000_m2u91a_firmware envy_5000_m2u94b_firmware envy_5000_z4a54a_firmware envy_5000_z4a74a_firmware deskjet_ink_advantage_500…	A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-18917	2024-11-21 13:33	2020-03-17	Show	GitHub Exploit DB Packet Storm