Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258371 9.3 危険 マイクロソフト - Microsoft Windows Help and Support Center に脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-1885 2010-07-23 18:55 2010-06-10 Show GitHub Exploit DB Packet Storm
258372 4.9 警告 マイクロソフト - Microsoft Windows の Canonical Display Driver における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2009-3678 2010-07-23 18:55 2010-05-14 Show GitHub Exploit DB Packet Storm
258373 9.3 危険 サン・マイクロシステムズ
レッドハット
リアルネットワークス
- Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性 CWE-119
バッファエラー
CVE-2009-4247 2010-07-23 18:55 2010-01-19 Show GitHub Exploit DB Packet Storm
258374 10 危険 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の LoginModule 実装における認証要求を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-4548 2010-07-22 20:51 2007-08-13 Show GitHub Exploit DB Packet Storm
258375 5 警告 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の management EJB における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-5085 2010-07-22 20:51 2007-09-6 Show GitHub Exploit DB Packet Storm
258376 7.5 危険 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の SQLLoginModule における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-5797 2010-07-22 20:51 2007-10-22 Show GitHub Exploit DB Packet Storm
258377 6.8 警告 InterSect Alliance International Pty - Snare Agent の Web インターフェースにクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-2594 2010-07-22 20:51 2010-06-30 Show GitHub Exploit DB Packet Storm
258378 5.5 警告 富士通 - Internet Navigware Server における情報漏えいの脆弱性 CWE-200
情報漏えい
- 2010-07-22 20:51 2010-06-18 Show GitHub Exploit DB Packet Storm
258379 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-3726 2010-07-22 17:53 2009-11-9 Show GitHub Exploit DB Packet Storm
258380 5 警告 IBM
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
マイクロソフト
オラクル
OpenOffice.org Project
レッドハット
- XML 署名の検証において認証回避が可能な問題 CWE-DesignError
CVE-2009-0217 2010-07-22 17:52 2009-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221511 9.8 CRITICAL
Network
mozilla thunderbird
firefox
firefox_esr
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially e… CWE-416
 Use After Free
CVE-2019-9790 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
221512 9.8 CRITICAL
Network
mozilla firefox Mozilla developers and community members reported memory safety bugs present in Firefox 65. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… CWE-787
 Out-of-bounds Write
CVE-2019-9789 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
221513 9.8 CRITICAL
Network
mozilla
redhat
firefox
firefox_esr
thunderbird
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the con… CWE-843
Type Confusion
CVE-2019-9791 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
221514 9.8 CRITICAL
Network
mozilla
redhat
firefox
firefox_esr
thunderbird
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed evidence of memory corruption and we pres… CWE-787
 Out-of-bounds Write
CVE-2019-9788 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
221515 6.1 MEDIUM
Network
wordfence wordfence The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector. NOTE: It has been asserted that this is not a valid vulnerability in the context of the Wordfence WordPress plugin as t… CWE-79
Cross-site Scripting
CVE-2019-9669 2024-11-21 13:52 2019-04-26 Show GitHub Exploit DB Packet Storm
221516 10.0 CRITICAL
Network
envoyproxy envoy Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass access control, e.g., a block on /admin. A backend server co… CWE-706
 Use of Incorrectly-Resolved Name or Reference
CVE-2019-9901 2024-11-21 13:52 2019-04-26 Show GitHub Exploit DB Packet Storm
221517 8.3 HIGH
Network
envoyproxy
redhat
envoy
openshift_service_mesh
When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote attackers crafting header values containing embedded NUL char… CWE-74
Injection
CVE-2019-9900 2024-11-21 13:52 2019-04-26 Show GitHub Exploit DB Packet Storm
221518 6.5 MEDIUM
Network
google tensorflow NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file. CWE-476
 NULL Pointer Dereference
CVE-2019-9635 2024-11-21 13:52 2019-04-25 Show GitHub Exploit DB Packet Storm
221519 9.8 CRITICAL
Network
western_digital my_cloud_mirror_gen_2_firmware
my_cloud_ex2_ultra_firmware
my_cloud_ex2100_firmware
my_cloud_ex4100
my_cloud_dl2100
my_cloud_dl4100_firmware
my_cloud_pr2100_firmware
my_cloud_pr4…
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-9951 2024-11-21 13:52 2019-04-25 Show GitHub Exploit DB Packet Storm
221520 9.8 CRITICAL
Network
westerndigital my_cloud_firmware
my_cloud_mirror_gen2_firmware
my_cloud_ex2_ultra_firmware
my_cloud_ex2100_firmware
my_cloud_ex4100_firmware
my_cloud_dl2100_firmware
my_cloud_dl4100_firmware
my…
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is… CWE-521
Weak Password Requirements 
CVE-2019-9950 2024-11-21 13:52 2019-04-25 Show GitHub Exploit DB Packet Storm