Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226031 7.2 危険 Novell - Novell ZENworks Desktop Management における権限を取得される脆弱性 CWE-Other
その他
CVE-2013-1092 2013-05-8 16:56 2013-04-15 Show GitHub Exploit DB Packet Storm
226032 10 危険 Novell - Novell iPrint Client におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1091 2013-05-8 16:53 2013-05-1 Show GitHub Exploit DB Packet Storm
226033 4.3 警告 ソフトバンク・テクノロジー株式会社 - Online Service Gate におけるパスワード管理不備の問題 CWE-noinfo
情報不足
CVE-2013-2308 2013-05-8 14:01 2013-05-8 Show GitHub Exploit DB Packet Storm
226034 5 警告 Zend Technologies Ltd. - Zend Framework の Zend_Feed における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2012-5657 2013-05-8 12:12 2013-05-2 Show GitHub Exploit DB Packet Storm
226035 6.8 警告 GNU Project - glibc の stdio-common/vfprintf.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-0864 2013-05-8 12:11 2012-02-17 Show GitHub Exploit DB Packet Storm
226036 5 警告 GNU Project - glibc の RPC の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-4609 2013-05-8 12:09 2011-12-13 Show GitHub Exploit DB Packet Storm
226037 6.8 警告 GNU Project - glibc の __tzfile_read 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-5029 2013-05-8 12:08 2009-06-1 Show GitHub Exploit DB Packet Storm
226038 5 警告 NextApp, Inc. - Echo の Java XML パーサにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2009-5135 2013-05-8 10:51 2009-02-24 Show GitHub Exploit DB Packet Storm
226039 4.3 警告 IBM - IBM Tivoli Federated Identity Manager および Tivoli Federated Identity Manager Business Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0582 2013-05-7 21:19 2013-04-23 Show GitHub Exploit DB Packet Storm
226040 3.5 注意 IBM - IBM Sametime の Classic Meeting Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0535 2013-05-7 21:18 2013-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223901 6.5 MEDIUM
Network
istio
redhat
istio
openshift_service_mesh
A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint, it is p… CWE-476
 NULL Pointer Dereference
CVE-2019-25014 2024-11-21 13:39 2021-01-29 Show GitHub Exploit DB Packet Storm
223902 8.8 HIGH
Network
opendoas_project opendoas In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed t… CWE-459
CWE-909
 Incomplete Cleanup
 Missing Initialization of Resource
CVE-2019-25016 2024-11-21 13:39 2021-01-29 Show GitHub Exploit DB Packet Storm
223903 5.4 MEDIUM
Network
openwrt openwrt LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID. CWE-79
Cross-site Scripting
CVE-2019-25015 2024-11-21 13:39 2021-01-27 Show GitHub Exploit DB Packet Storm
223904 5.9 MEDIUM
Network
gnu
fedoraproject
netapp
broadcom
debian
glibc
fedora
ontap_select_deploy_administration_utility
service_processor
fabric_operating_system
a250_firmware
500f_firmware
debian_linux
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. CWE-125
Out-of-bounds Read
CVE-2019-25013 2024-11-21 13:39 2021-01-5 Show GitHub Exploit DB Packet Storm
223905 7.5 HIGH
Network
webform_report_project webform_report The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy. CWE-425
 Direct Request ('Forced Browsing')
CVE-2019-25012 2024-11-21 13:39 2021-01-1 Show GitHub Exploit DB Packet Storm
223906 5.4 MEDIUM
Network
netbox netbox NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as demonstrated by /dcim/sites/add/ comments. CWE-79
Cross-site Scripting
CVE-2019-25011 2024-11-21 13:39 2021-01-1 Show GitHub Exploit DB Packet Storm
223907 9.8 CRITICAL
Network
failure_project failure An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_type_id__ is overridden. CWE-843
Type Confusion
CVE-2019-25010 2024-11-21 13:39 2020-12-31 Show GitHub Exploit DB Packet Storm
223908 9.8 CRITICAL
Network
hyper http An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness. CWE-415
 Double Free
CVE-2019-25009 2024-11-21 13:39 2020-12-31 Show GitHub Exploit DB Packet Storm
223909 7.5 HIGH
Network
streebog_project streebog An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can cause a panic. NVD-CWE-noinfo
CVE-2019-25007 2024-11-21 13:39 2020-12-31 Show GitHub Exploit DB Packet Storm
223910 7.5 HIGH
Network
streebog_project streebog An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong answer. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-25006 2024-11-21 13:39 2020-12-31 Show GitHub Exploit DB Packet Storm