Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226191	4.3	警告	Novell	-	Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1086	2013-04-23 12:14	2013-04-16	Show	GitHub Exploit DB Packet Storm

226192	9.3	危険	Bitberry Software	-	BitZipper にメモリ破壊の脆弱性	CWE-Other その他	CVE-2013-0138	2013-04-23 11:40	2013-04-19	Show	GitHub Exploit DB Packet Storm

226193	1.9	注意	AVAST Software s.r.o.	-	avast! Mobile Security にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0122	2013-04-23 11:25	2013-04-10	Show	GitHub Exploit DB Packet Storm

226194	3.5	注意	pd-admin	-	pd-admin にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0129	2013-04-23 11:09	2013-04-16	Show	GitHub Exploit DB Packet Storm

226195	7.8	危険	Arecont Vision	-	AV1355DN にサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0139	2013-04-22 16:55	2013-04-15	Show	GitHub Exploit DB Packet Storm

226196	4.9	警告	シスコシステムズ	-	Cisco ASA 上で稼働するクライアントレス SSL VPN におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2013-1199	2013-04-22 16:49	2013-04-17	Show	GitHub Exploit DB Packet Storm

226197	7.5	危険	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-Other その他	CVE-2013-1453	2013-04-22 16:48	2013-02-4	Show	GitHub Exploit DB Packet Storm

226198	5	警告	シスコシステムズ	-	Cisco ASA デバイスの ISAKMP の実装におけるグループを列挙される脆弱性	CWE-200 情報漏えい	CVE-2013-1194	2013-04-22 16:46	2013-04-17	Show	GitHub Exploit DB Packet Storm

226199	7.5	危険	シスコシステムズ	-	Cisco Network Admission Control Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-1177	2013-04-22 16:39	2013-04-17	Show	GitHub Exploit DB Packet Storm

226200	7.1	危険	シスコシステムズ	-	Cisco TelePresence MCU デバイスおよび TelePresence Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-1176	2013-04-22 16:38	2013-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222211	9.8	CRITICAL Network	gliderlabs opensuse f5	docker-alpine leap big-ip_controller	Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 201…	NVD-CWE-Other	CVE-2019-5021	2024-11-21 13:44	2019-05-9	Show	GitHub Exploit DB Packet Storm

222212	6.5	MEDIUM Adjacent	wincofireworks	fw-1007_firmware	An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vu…	CWE-306 Missing Authentication for Critical Function	CVE-2019-5014	2024-11-21 13:44	2019-05-9	Show	GitHub Exploit DB Packet Storm

222213	5.4	MEDIUM Network	revive-adserver	revive_adserver	A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another (unsafe) …	CWE-601 Open Redirect	CVE-2019-5433	2024-11-21 13:44	2019-05-7	Show	GitHub Exploit DB Packet Storm

222214	7.5	HIGH Network	mqtt-packet_project	mqtt-packet	A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding.	CWE-125 Out-of-bounds Read	CVE-2019-5432	2024-11-21 13:44	2019-05-7	Show	GitHub Exploit DB Packet Storm

222215	8.8	HIGH Network	ui	unifi_video	In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without the user consent, requiring the attacker t…	CWE-352 Origin Validation Error	CVE-2019-5430	2024-11-21 13:44	2019-05-7	Show	GitHub Exploit DB Packet Storm

222216	9.8	CRITICAL Network	revive-sas	revive_adserver	An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability c…	CWE-502 Deserialization of Untrusted Data	CVE-2019-5434	2024-11-21 13:44	2019-05-7	Show	GitHub Exploit DB Packet Storm

222217	5.4	MEDIUM Network	twitter	twitter_kit	This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulnerable to a callback verification flaw in the "Login with Twitter" component allo…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-5431	2024-11-21 13:44	2019-05-7	Show	GitHub Exploit DB Packet Storm

222218	7.8	HIGH Local	filezilla-project debian fedoraproject	filezilla_client debian_linux fedora	Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.	CWE-426 Untrusted Search Path	CVE-2019-5429	2024-11-21 13:44	2019-04-30	Show	GitHub Exploit DB Packet Storm

222219	7.5	HIGH Network	mchange fedoraproject oracle	c3p0 fedora retail_xstore_point_of_service flexcube_private_banking webcenter_sites communications_ip_service_activator hyperion_infrastructure_technology enterprise_manager_ops_…	c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.	CWE-776 XML Entity Expansion	CVE-2019-5427	2024-11-21 13:44	2019-04-23	Show	GitHub Exploit DB Packet Storm

222220	7.5	HIGH Network	qemu	qemu	hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.	CWE-476 NULL Pointer Dereference	CVE-2019-5008	2024-11-21 13:44	2019-04-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed