Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258321 7.5 危険 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの get_history_lastid 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4499 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
258322 6.8 警告 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの node_process_command 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-4498 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
258323 6.9 警告 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3181 2010-11-11 15:07 2010-10-19 Show GitHub Exploit DB Packet Storm
258324 9.3 危険 アドビシステムズ - 複数の Adobe 製品における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3153 2010-11-10 15:34 2010-10-18 Show GitHub Exploit DB Packet Storm
258325 4.3 警告 アドビシステムズ - Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2886 2010-11-10 15:34 2010-10-18 Show GitHub Exploit DB Packet Storm
258326 4.3 警告 アドビシステムズ - Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2885 2010-11-10 15:33 2010-10-18 Show GitHub Exploit DB Packet Storm
258327 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の browser-plugin 実装における任意のプログラムを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3749 2010-11-10 15:33 2010-10-15 Show GitHub Exploit DB Packet Storm
258328 10 危険 リアルネットワークス - RealNetworks RealPlayer の RichFX コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3748 2010-11-10 15:32 2010-10-15 Show GitHub Exploit DB Packet Storm
258329 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3751 2010-11-10 15:32 2010-10-15 Show GitHub Exploit DB Packet Storm
258330 10 危険 SAP - SAP BusinessObjects Axis2 におけるデフォルトパスワードの問題 CWE-255
証明書・パスワード管理 		CVE-2010-0219 2010-11-10 15:32 2010-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222371 6.1 MEDIUM
Network 		codepeople contact_form_email The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area." CWE-79
Cross-site Scripting 		CVE-2019-9646 2024-11-21 13:52 2019-03-11 Show GitHub Exploit DB Packet Storm
222372 9.8 CRITICAL
Network 		php
debian
canonical
opensuse
netapp 		php
debian_linux
ubuntu_linux
leap
storage_automation_store 		An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF. CWE-908
 Use of Uninitialized Resource 		CVE-2019-9641 2024-11-21 13:52 2019-03-9 Show GitHub Exploit DB Packet Storm
222373 7.5 HIGH
Network 		php
canonical
debian
opensuse
netapp
redhat 		php
ubuntu_linux
debian_linux
leap
storage_automation_store
software_collections 		An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn. CWE-125
Out-of-bounds Read 		CVE-2019-9640 2024-11-21 13:52 2019-03-9 Show GitHub Exploit DB Packet Storm
222374 7.5 HIGH
Network 		php
debian
canonical
opensuse
netapp
redhat 		php
debian_linux
ubuntu_linux
leap
storage_automation_store
software_collections 		An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling… CWE-908
CWE-909
 Use of Uninitialized Resource
 Missing Initialization of Resource 		CVE-2019-9639 2024-11-21 13:52 2019-03-9 Show GitHub Exploit DB Packet Storm
222375 7.5 HIGH
Network 		php
debian
canonical
opensuse
netapp
redhat 		php
debian_linux
ubuntu_linux
leap
storage_automation_store
software_collections 		An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling… CWE-125
Out-of-bounds Read 		CVE-2019-9638 2024-11-21 13:52 2019-03-9 Show GitHub Exploit DB Packet Storm
222376 7.5 HIGH
Network 		php
debian
canonical
opensuse
netapp 		php
debian_linux
ubuntu_linux
leap
storage_automation_store 		An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2019-9637 2024-11-21 13:52 2019-03-9 Show GitHub Exploit DB Packet Storm
222377 9.8 CRITICAL
Network 		python
fedoraproject
opensuse
debian
canonical
redhat
oracle 		python
fedora
leap
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux
e… 		Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (cr… NVD-CWE-noinfo
CVE-2019-9636 2024-11-21 13:52 2019-03-9 Show GitHub Exploit DB Packet Storm
222378 7.8 HIGH
Local 		golang go Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-9634 2024-11-21 13:52 2019-03-9 Show GitHub Exploit DB Packet Storm
222379 6.5 MEDIUM
Network 		gnome glib gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2019-9633 2024-11-21 13:52 2019-03-8 Show GitHub Exploit DB Packet Storm
222380 7.5 HIGH
Network 		esafenet electronic_document_security_management_system ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. NVD-CWE-noinfo
CVE-2019-9632 2024-11-21 13:52 2019-03-8 Show GitHub Exploit DB Packet Storm