Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257351	5.8	警告	PostgreSQL.org ターボリナックスサン・マイクロシステムズ	-	PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4034	2010-01-26 11:48	2009-12-15	Show	GitHub Exploit DB Packet Storm

257352	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4031	2010-01-26 11:47	2009-11-29	Show	GitHub Exploit DB Packet Storm

257353	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の r8169 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3613	2010-01-26 11:38	2009-10-19	Show	GitHub Exploit DB Packet Storm

257354	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の NFSv4 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3286	2010-01-26 11:38	2009-09-22	Show	GitHub Exploit DB Packet Storm

257355	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の d_delete 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2009-2908	2010-01-26 11:38	2009-10-13	Show	GitHub Exploit DB Packet Storm

257356	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2009-2695	2010-01-26 11:38	2009-08-28	Show	GitHub Exploit DB Packet Storm

257357	9.3	危険	アップルサイバートラスト株式会社サン・マイクロシステムズレッドハット	-	JDK および JRE の Sun Java SE にある Deployment Toolkit プラグインにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3865	2010-01-26 11:37	2009-11-3	Show	GitHub Exploit DB Packet Storm

257358	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の tc_fill_tclass 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3228	2010-01-26 11:37	2009-10-19	Show	GitHub Exploit DB Packet Storm

257359	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo32 コーデックの ir32_32.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-4313	2010-01-25 11:53	2009-12-8	Show	GitHub Exploit DB Packet Storm

257360	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4312	2010-01-25 11:52	2009-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218811	8.8	HIGH Network	popojicms	popojicms	An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935.	CWE-352 Origin Validation Error	CVE-2019-9549	2024-11-21 13:51	2019-03-4	Show	GitHub Exploit DB Packet Storm

218812	5.3	MEDIUM Network	spdk	storage_performance_development_kit	In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denia…	CWE-834 Excessive Iteration	CVE-2019-9547	2024-11-21 13:51	2019-03-2	Show	GitHub Exploit DB Packet Storm

218813	9.8	CRITICAL Network	solarwinds	orion_platform	SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.	CWE-427 Uncontrolled Search Path Element	CVE-2019-9546	2024-11-21 13:51	2019-03-2	Show	GitHub Exploit DB Packet Storm

218814	8.8	HIGH Network	freedesktop	poppler	An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the p…	CWE-674 Uncontrolled Recursion	CVE-2019-9545	2024-11-21 13:51	2019-03-2	Show	GitHub Exploit DB Packet Storm

218815	8.8	HIGH Network	axiosys	bento4	An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() located in Core/Ap4Array.h. It can be triggered by sending a crafted file to (fo…	CWE-787 Out-of-bounds Write	CVE-2019-9544	2024-11-21 13:51	2019-03-2	Show	GitHub Exploit DB Packet Storm

218816	8.8	HIGH Network	freedesktop	poppler	An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) th…	CWE-674 Uncontrolled Recursion	CVE-2019-9543	2024-11-21 13:51	2019-03-2	Show	GitHub Exploit DB Packet Storm

218817	7.5	HIGH Network	carel	pcoweb_card_firmware	The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the mode…	CWE-306 Missing Authentication for Critical Function	CVE-2019-9484	2024-11-21 13:51	2019-03-1	Show	GitHub Exploit DB Packet Storm

218818	9.1	CRITICAL Network	amazon	ring_video_doorbell_firmware	Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-9483	2024-11-21 13:51	2019-03-1	Show	GitHub Exploit DB Packet Storm

218819	5.3	MEDIUM Network	misp	misp	In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instance…	CWE-862 Missing Authorization	CVE-2019-9482	2024-11-21 13:51	2019-03-1	Show	GitHub Exploit DB Packet Storm

218820	9.8	CRITICAL Network	baigo	baigo_cms	An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BG_SITE_NAME parameter with malicious code can be written into the opt_b…	CWE-94 Code Injection	CVE-2019-9227	2024-11-21 13:51	2019-02-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed