Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226181 7.1 危険 Puppet
Canonical
- Puppet における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-1653 2013-04-23 17:14 2013-03-12 Show GitHub Exploit DB Packet Storm
226182 7.8 危険 シスコシステムズ - Cisco IOS の VRF-aware NAT 機能におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-362
競合状態
CVE-2013-1142 2013-04-23 17:13 2013-03-27 Show GitHub Exploit DB Packet Storm
226183 6.4 警告 Ruby on Rails project - Ruby on Rails の Active Record コンポーネントにおけるデータ型インジェクション攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-3221 2013-04-23 17:12 2013-04-22 Show GitHub Exploit DB Packet Storm
226184 4.9 警告 Linux - Linux Kernel の net/vmw_vsock/af_vsock.c における重要な情報を取得される脆弱性 CWE-200
CWE-DesignError
CVE-2013-3237 2013-04-23 16:32 2013-04-7 Show GitHub Exploit DB Packet Storm
226185 4.9 警告 Linux - Linux Kernel の net/vmw_vsock/vmci_transport.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-3236 2013-04-23 16:32 2013-04-7 Show GitHub Exploit DB Packet Storm
226186 10 危険 日立 - Hitachi IT Operations Director におけるバッファオーバーフローの脆弱性 CWE-noinfo
情報不足
- 2013-04-23 15:12 2013-04-19 Show GitHub Exploit DB Packet Storm
226187 10 危険 Opera Software ASA - Opera における脆弱性 CWE-noinfo
情報不足
CVE-2013-3211 2013-04-23 15:08 2013-04-4 Show GitHub Exploit DB Packet Storm
226188 5 警告 Opera Software ASA - Opera における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-3210 2013-04-23 15:07 2013-04-4 Show GitHub Exploit DB Packet Storm
226189 4.9 警告 Puppet
Canonical
- Puppet における任意のカタログを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1652 2013-04-23 13:54 2013-03-12 Show GitHub Exploit DB Packet Storm
226190 6.8 警告 Lester Chan - WordPress 用 WP-DownloadManager プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2697 2013-04-23 12:23 2013-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222231 7.5 HIGH
Network
zeit serve A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server. CWE-22
Path Traversal
CVE-2019-5417 2024-11-21 13:44 2019-03-22 Show GitHub Exploit DB Packet Storm
222232 7.5 HIGH
Network
localhost-now_project localhost-now A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server. CWE-22
Path Traversal
CVE-2019-5416 2024-11-21 13:44 2019-03-22 Show GitHub Exploit DB Packet Storm
222233 7.5 HIGH
Network
zeit serve A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to. CWE-269
 Improper Privilege Management
CVE-2019-5415 2024-11-21 13:44 2019-03-22 Show GitHub Exploit DB Packet Storm
222234 8.1 HIGH
Network
kill-port_project kill-port If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2. CWE-78
OS Command 
CVE-2019-5414 2024-11-21 13:44 2019-03-22 Show GitHub Exploit DB Packet Storm
222235 9.8 CRITICAL
Network
morgan_project morgan An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1. CWE-77
Command Injection
CVE-2019-5413 2024-11-21 13:44 2019-03-22 Show GitHub Exploit DB Packet Storm
222236 5.5 MEDIUM
Local
macpaw cleanmymac_x An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon up… CWE-459
 Incomplete Cleanup
CVE-2019-5011 2024-11-21 13:44 2019-03-22 Show GitHub Exploit DB Packet Storm
222237 7.8 HIGH
Local
pixar renderman A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their… NVD-CWE-noinfo
CVE-2019-5015 2024-11-21 13:44 2019-03-9 Show GitHub Exploit DB Packet Storm
222238 9.8 CRITICAL
Network
rainbowpdf office_server_document_converter A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 (7,0,2018,1113). While parsing Document Summary P… CWE-787
 Out-of-bounds Write
CVE-2019-5019 2024-11-21 13:44 2019-03-8 Show GitHub Exploit DB Packet Storm
222239 9.8 CRITICAL
Network
wxjava_project wxjava An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for C… CWE-611
XXE
CVE-2019-5312 2024-11-21 13:44 2019-01-5 Show GitHub Exploit DB Packet Storm
222240 6.1 MEDIUM
Network
yunucms yunucms An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter. CWE-79
Cross-site Scripting
CVE-2019-5311 2024-11-21 13:44 2019-01-5 Show GitHub Exploit DB Packet Storm