Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 10:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258581	9.3	危険	アップルサイバートラスト株式会社レッドハットオラクル Info-ZIP	-	UnZip の NEEDBITS マクロにおける無効なバッファ領域を参照してしまう問題	CWE-119 バッファエラー	CVE-2008-0888	2010-12-15 12:37	2008-03-17	Show	GitHub Exploit DB Packet Storm

258582	6	警告	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Tcl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1170	2010-12-15 12:35	2010-05-17	Show	GitHub Exploit DB Packet Storm

258583	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1169	2010-12-15 12:31	2010-05-17	Show	GitHub Exploit DB Packet Storm

258584	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3753	2010-12-14 14:24	2010-09-27	Show	GitHub Exploit DB Packet Storm

258585	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3752	2010-12-14 14:22	2010-09-27	Show	GitHub Exploit DB Packet Storm

258586	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3308	2010-12-14 14:20	2010-09-27	Show	GitHub Exploit DB Packet Storm

258587	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3302	2010-12-14 14:15	2010-09-27	Show	GitHub Exploit DB Packet Storm

258588	4.3	警告	freedesktop.org レッドハット	-	Poppler の PDF パーサ内にある poppler/Function.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3703	2010-12-13 16:04	2010-11-5	Show	GitHub Exploit DB Packet Storm

258589	8.3	危険	Linux レッドハット	-	Linux kernel の sctp_auth_asoc_get_hmac 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3705	2010-12-13 15:57	2010-10-20	Show	GitHub Exploit DB Packet Storm

258590	6.6	警告	Linux レッドハット	-	Linux kernel の pkt_find_dev_from_minor 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-3437	2010-12-13 15:41	2010-10-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225991	5.5	MEDIUM Local	foxitsoftware	foxit_reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the alloca…	CWE-787 Out-of-bounds Write	CVE-2019-5005	2024-11-21 13:44	2019-01-4	Show	GitHub Exploit DB Packet Storm

225992	9.8	CRITICAL Network	ibm	financial_transaction_manager	IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which coul…	CWE-89 SQL Injection	CVE-2019-4575	2024-11-21 13:43	2022-06-16	Show	GitHub Exploit DB Packet Storm

225993	2.4	LOW Physics	ibm	maximo_anywhere	IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494.	NVD-CWE-noinfo	CVE-2019-4352	2024-11-21 13:43	2022-02-17	Show	GitHub Exploit DB Packet Storm

225994	4.6	MEDIUM Physics	ibm	maximo_anywhere	IBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with physical access to the device. IBM X-Force ID: 161493.	NVD-CWE-noinfo	CVE-2019-4351	2024-11-21 13:43	2022-02-17	Show	GitHub Exploit DB Packet Storm

225995	6.5	MEDIUM Network	ibm	maximo_anywhere	IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697.	CWE-326 Inadequate Encryption Strength	CVE-2019-4291	2024-11-21 13:43	2022-02-17	Show	GitHub Exploit DB Packet Storm

225996	5.4	MEDIUM Network	ibm netapp	cognos_analytics oncommand_insight	IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot…	CWE-79 Cross-site Scripting	CVE-2019-4653	2024-11-21 13:43	2021-06-1	Show	GitHub Exploit DB Packet Storm

225997	6.5	MEDIUM Network	ibm netapp	cognos_analytics oncommand_insight	IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive cookie in an HTTPS session. A remote att…	CWE-311 Missing Encryption of Sensitive Data	CVE-2019-4471	2024-11-21 13:43	2021-06-1	Show	GitHub Exploit DB Packet Storm

225998	7.8	HIGH Local	ibm	db2	IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks.	CWE-427 Uncontrolled Search Path Element	CVE-2019-4588	2024-11-21 13:43	2021-05-27	Show	GitHub Exploit DB Packet Storm

225999	5.3	MEDIUM Network	ibm	security_guardium_data_encrpytion	IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server …	CWE-312 Cleartext Storage of Sensitive Information	CVE-2019-4687	2024-11-21 13:43	2021-01-14	Show	GitHub Exploit DB Packet Storm

226000	7.5	HIGH Network	ibm	security_guardium_data_encrpytion	IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577.	CWE-326 Inadequate Encryption Strength	CVE-2019-4160	2024-11-21 13:43	2021-01-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed