Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258771	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

258772	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

258773	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

258774	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

258775	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

258776	6.9	警告	mielke レッドハット	-	brltty の libbrlttybba.so における権限昇格の脆弱性	CWE-264 CWE-Other	CVE-2008-3279	2010-04-21 17:47	2010-03-30	Show	GitHub Exploit DB Packet Storm

258777	4.3	警告	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0181	2010-04-20 16:42	2010-03-30	Show	GitHub Exploit DB Packet Storm

258778	5.8	警告	サイボウズ	-	複数のサイボウズ製品におけるアクセス制限に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2029	2010-04-20 12:01	2010-04-20	Show	GitHub Exploit DB Packet Storm

258779	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0805	2010-04-19 19:20	2010-03-30	Show	GitHub Exploit DB Packet Storm

258780	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0491	2010-04-19 19:19	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225081	8.8	HIGH Network	ibm	emptoris_spend_analysis emptoris_strategic_supply_management_platform	IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL s…	CWE-89 SQL Injection	CVE-2019-4752	2024-11-21 13:44	2020-02-21	Show	GitHub Exploit DB Packet Storm

225082	8.8	HIGH Network	accusoft	imagegear	An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted TIFF file file can cause an out…	CWE-787 Out-of-bounds Write	CVE-2019-5187	2024-11-21 13:44	2020-02-15	Show	GitHub Exploit DB Packet Storm

225083	7.5	HIGH Network	arubanetworks	5400r_firmware 3810_firmware 2920_firmware 2930_firmware 2530_with_gigt_port_firmware 2530_10\/100_port_firmware 2540_firmware	A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerabilit…	NVD-CWE-noinfo	CVE-2019-5322	2024-11-21 13:44	2020-02-13	Show	GitHub Exploit DB Packet Storm

225084	5.3	MEDIUM Network	ibm	content_navigator	IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to netwo…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-4741	2024-11-21 13:44	2020-02-13	Show	GitHub Exploit DB Packet Storm

225085	6.5	MEDIUM Local	ibm	sdk websphere_application_server	IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the s…	CWE-426 Untrusted Search Path	CVE-2019-4732	2024-11-21 13:44	2020-02-4	Show	GitHub Exploit DB Packet Storm

225086	7.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to caus…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-4720	2024-11-21 13:44	2020-02-1	Show	GitHub Exploit DB Packet Storm

225087	7.1	HIGH Network	ibm	security_access_manager	IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sen…	CWE-611 XXE	CVE-2019-4707	2024-11-21 13:44	2020-01-29	Show	GitHub Exploit DB Packet Storm

225088	7.5	HIGH Network	gitlab	gitlab	An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information.	CWE-862 Missing Authorization	CVE-2019-5470	2024-11-21 13:44	2020-01-28	Show	GitHub Exploit DB Packet Storm

225089	8.8	HIGH Network	gitlab	gitlab	An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used with a blocked account.	CWE-269 Improper Privilege Management	CVE-2019-5468	2024-11-21 13:44	2020-01-28	Show	GitHub Exploit DB Packet Storm

225090	4.3	MEDIUM Network	gitlab	gitlab	An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2019-5466	2024-11-21 13:44	2020-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed