Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256941	5	警告	オラクル	-	Oracle Application Server の J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0067	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

256942	5	警告	オラクル	-	Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0066	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

256943	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1385	2010-02-15 11:03	2009-06-4	Show	GitHub Exploit DB Packet Storm

256944	4.6	警告	サイバートラスト株式会社 Todd C. Miller	-	sudo の Perl スクリプト実行時における権限昇格の脆弱性	-	CVE-2005-4158	2010-02-15 11:03	2005-11-8	Show	GitHub Exploit DB Packet Storm

256945	1	注意	オラクル	-	Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3412	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

256946	3.2	注意	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3413	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

256947	3.6	注意	オラクル	-	Oracle Database の RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3410	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

256948	4	警告	オラクル	-	Oracle Database の Logical Standby コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-1996	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

256949	4.9	警告	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3414	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

256950	4.9	警告	オラクル	-	Oracle Database の Oracle Data Pump コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3411	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220011	7.5	HIGH Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.	CWE-22 Path Traversal	CVE-2019-6240	2024-11-21 13:46	2019-03-26	Show	GitHub Exploit DB Packet Storm

220012	8.8	HIGH Network	risi	gestao_de_horarios	RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.	CWE-89 SQL Injection	CVE-2019-6491	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220013	9.8	CRITICAL Network	blogengine	blogengine.net	An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx componen…	CWE-22 Path Traversal	CVE-2019-6714	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220014	5.9	MEDIUM Network	mastercard	qkr\!_with_masterpass	The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier.	CWE-295 Improper Certificate Validation	CVE-2019-6702	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220015	7.5	HIGH Network	python debian opensuse suse canonical	python-gnupg debian_linux leap backports ubuntu_linux	python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and …	CWE-20 Improper Input Validation	CVE-2019-6690	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220016	5.5	MEDIUM Local	qemu fedoraproject	qemu fedora	In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-6501	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220017	5.5	MEDIUM Local	iobit	smart_defrag	SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can b…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-6492	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220018	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wi…	CWE-352 Origin Validation Error	CVE-2019-6282	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220019	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, …	NVD-CWE-noinfo	CVE-2019-6279	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220020	8.8	HIGH Network	gl-inet	gl-ar300m-lite_firmware	Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.	CWE-77 Command Injection	CVE-2019-6275	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed