Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258371	6.9	警告	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3959	2011-01-14 15:27	2010-12-14	Show	GitHub Exploit DB Packet Storm

258372	5	警告	アップルサイバートラスト株式会社 OpenLDAP Foundation ターボリナックス VMware レッドハット	-	OpenLDAP の IA5StringNormalize 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0212	2011-01-14 14:45	2010-06-30	Show	GitHub Exploit DB Packet Storm

258373	5	警告	アップルサイバートラスト株式会社 OpenLDAP Foundation ターボリナックス VMware レッドハット	-	OpenLDAP の slap_modrdn2mods 関数における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0211	2011-01-14 14:45	2010-06-30	Show	GitHub Exploit DB Packet Storm

258374	6.2	警告	サイバートラスト株式会社 VMware Todd C. Miller レッドハット	-	sudo における権限昇格の脆弱性	CWE-DesignError	CVE-2010-2956	2011-01-14 14:44	2010-09-7	Show	GitHub Exploit DB Packet Storm

258375	-	-	GNU Project VMware サイバートラスト株式会社レッドハット	-	glibc に権限昇格の脆弱性	-	CVE-2010-3847	2011-01-14 14:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

258376	7.8	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における終端文字列の処理に関する重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-2495	2011-01-14 14:33	2009-07-28	Show	GitHub Exploit DB Packet Storm

258377	9.3	危険	サン・マイクロシステムズアドビシステムズ日本電気マイクロソフト OpenOffice.org Project	-	Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2493	2011-01-14 14:32	2009-07-28	Show	GitHub Exploit DB Packet Storm

258378	9.3	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0901	2011-01-14 14:31	2009-07-28	Show	GitHub Exploit DB Packet Storm

258379	6.9	警告	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3957	2011-01-13 16:22	2010-12-14	Show	GitHub Exploit DB Packet Storm

258380	9.3	危険	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3956	2011-01-13 16:19	2010-12-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215391	7.5	HIGH Network	metinfo	metinfo	An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information.	CWE-22 Path Traversal	CVE-2020-19304	2024-11-21 14:09	2021-08-4	Show	GitHub Exploit DB Packet Storm

215392	7.8	HIGH Local	houdunren	hdcms	An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a crafted file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-19303	2024-11-21 14:09	2021-08-4	Show	GitHub Exploit DB Packet Storm

215393	9.8	CRITICAL Network	vaethink	vaethink	An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php".	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-19302	2024-11-21 14:09	2021-08-4	Show	GitHub Exploit DB Packet Storm

215394	9.8	CRITICAL Network	vaethink	vaethink	A vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to execute arbitrary code via a crafted payload in the condition parameter.	CWE-863 Incorrect Authorization	CVE-2020-19301	2024-11-21 14:09	2021-08-4	Show	GitHub Exploit DB Packet Storm

215395	8.8	HIGH Network	struktur	libheif	An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.	CWE-125 Out-of-bounds Read	CVE-2020-19499	2024-11-21 14:09	2021-07-22	Show	GitHub Exploit DB Packet Storm

215396	8.8	HIGH Network	struktur	libheif	Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.	NVD-CWE-noinfo	CVE-2020-19498	2024-11-21 14:09	2021-07-22	Show	GitHub Exploit DB Packet Storm

215397	8.8	HIGH Network	matio_project	matio	Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.	CWE-190 Integer Overflow or Wraparound	CVE-2020-19497	2024-11-21 14:09	2021-07-22	Show	GitHub Exploit DB Packet Storm

215398	7.8	HIGH Local	sam2p_project	sam2p	There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.	NVD-CWE-noinfo	CVE-2020-19492	2024-11-21 14:09	2021-07-22	Show	GitHub Exploit DB Packet Storm

215399	7.8	HIGH Local	sam2p_project	sam2p	There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.	CWE-787 Out-of-bounds Write	CVE-2020-19491	2024-11-21 14:09	2021-07-22	Show	GitHub Exploit DB Packet Storm

215400	5.5	MEDIUM Local	tinyexr_project	tinyexr	tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.	CWE-190 Integer Overflow or Wraparound	CVE-2020-19490	2024-11-21 14:09	2021-07-22	Show	GitHub Exploit DB Packet Storm