Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257051	2.1	注意	サン・マイクロシステムズ	-	Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4080	2010-01-15 14:10	2009-11-24	Show	GitHub Exploit DB Packet Storm

257052	5	警告	サン・マイクロシステムズ	-	Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4075	2010-01-15 14:09	2009-11-23	Show	GitHub Exploit DB Packet Storm

257053	2.6	注意	オラクル	-	Oracle Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-01-14 15:01	2010-01-14	Show	GitHub Exploit DB Packet Storm

257054	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer に脆弱性	CWE-94 コード・インジェクション	CVE-2009-3672	2010-01-14 12:08	2009-11-25	Show	GitHub Exploit DB Packet Storm

257055	9.3	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の java.lang パッケージにおける脆弱性	CWE-362 競合状態	CVE-2009-2724	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

257056	10	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の Provider クラスにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-2721	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

257057	5	警告	有限会社シースリー	-	WebCalenderC3 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0348	2010-01-12 15:01	2010-01-12	Show	GitHub Exploit DB Packet Storm

257058	4.3	警告	有限会社シースリー	-	WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0349	2010-01-12 15:00	2010-01-12	Show	GitHub Exploit DB Packet Storm

257059	10	危険	サイバートラスト株式会社 XEmacs	-	XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2688	2010-01-12 14:48	2009-08-5	Show	GitHub Exploit DB Packet Storm

257060	6.8	警告	IBM	-	IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2746	2010-01-12 14:48	2009-11-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219031	5.5	MEDIUM Local	belwith-keeler	hickory_smart	An insecure storage of sensitive information vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. The application's database was found to contain informati…	CWE-922 Insecure Storage of Sensitive Information	CVE-2019-5632	2024-11-21 13:45	2019-08-22	Show	GitHub Exploit DB Packet Storm

219032	8.8	HIGH Network	rapid7	nexpose	Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's p…	CWE-613 Insufficient Session Expiration	CVE-2019-5638	2024-11-21 13:45	2019-08-22	Show	GitHub Exploit DB Packet Storm

219033	7.8	HIGH Local	rapid7	insightappsec	The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system (who must already be authenticated t…	CWE-426 Untrusted Search Path	CVE-2019-5631	2024-11-21 13:45	2019-08-20	Show	GitHub Exploit DB Packet Storm

219034	9.8	CRITICAL Network	nokogiri canonical debian	nokogiri ubuntu_linux debian_linux	A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented met…	CWE-78 OS Command	CVE-2019-5477	2024-11-21 13:45	2019-08-17	Show	GitHub Exploit DB Packet Storm

219035	7.8	HIGH Local	nvidia	shield_experience	NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, de…	NVD-CWE-noinfo	CVE-2019-5681	2024-11-21 13:45	2019-08-14	Show	GitHub Exploit DB Packet Storm

219036	6.5	MEDIUM Network	netapp	oncommand_insight	OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user.	NVD-CWE-noinfo	CVE-2019-5498	2024-11-21 13:45	2019-08-10	Show	GitHub Exploit DB Packet Storm

219037	9.8	CRITICAL Network	nextcloud	lookup-server	An SQL Injection in the Nextcloud Lookup-Server < v0.3.0 (running on https://lookup.nextcloud.com) caused unauthenticated users to be able to execute arbitrary SQL commands.	CWE-89 SQL Injection	CVE-2019-5476	2024-11-21 13:45	2019-08-8	Show	GitHub Exploit DB Packet Storm

219038	7.1	HIGH Local	nvidia	gpu_driver	NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which an incorrect use of default permissions for an obj…	CWE-276 Incorrect Default Permissions	CVE-2019-5687	2024-11-21 13:45	2019-08-7	Show	GitHub Exploit DB Packet Storm

219039	5.5	MEDIUM Local	nvidia	gpu_driver	NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software uses an API function or data structur…	NVD-CWE-noinfo	CVE-2019-5686	2024-11-21 13:45	2019-08-7	Show	GitHub Exploit DB Packet Storm

219040	9.8	CRITICAL Network	nvidia	gpu_driver	NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, …	CWE-787 Out-of-bounds Write	CVE-2019-5685	2024-11-21 13:45	2019-08-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed