Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226211	5.8	警告	Timo Sirainen	-	Dovecot における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4318	2013-03-8 19:27	2011-11-17	Show	GitHub Exploit DB Packet Storm

226212	4.3	警告	Trimble	-	Trimble Infrastructure GNSS Series Receiver におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5053	2013-03-8 19:25	2013-03-7	Show	GitHub Exploit DB Packet Storm

226213	5	警告	サイボウズ日本電気 IBM Apache Software Foundation 富士通日立	-	Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4858	2013-03-8 15:39	2012-01-5	Show	GitHub Exploit DB Packet Storm

226214	5.4	警告	IBM	-	WebSphere Cast Iron Cloud インテグレーションにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-0465	2013-03-8 14:26	2013-02-12	Show	GitHub Exploit DB Packet Storm

226215	6.8	警告	Google	-	Google Chrome で使用される libxslt におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2012-2893	2013-03-8 14:19	2012-09-25	Show	GitHub Exploit DB Packet Storm

226216	5	警告	サイバートラスト株式会社 Google Mozilla Foundation レッドハット	-	Google Chrome などで利用される xsltGenerateIdFunction 関数における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-1202	2013-03-8 13:50	2011-03-8	Show	GitHub Exploit DB Packet Storm

226217	6.8	警告	The GIMP Team	-	GIMP の GIF 画像形式用プラグインにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-3481	2013-03-8 13:47	2012-08-25	Show	GitHub Exploit DB Packet Storm

226218	6.8	警告	The GIMP Team	-	GIMP の KiSS CEL ファイルフォーマットプラグインにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3403	2013-03-8 13:45	2012-08-25	Show	GitHub Exploit DB Packet Storm

226219	4.3	警告	シスコシステムズ	-	Cisco Security Monitoring, Analysis and Response System における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-1140	2013-03-7 19:17	2013-03-4	Show	GitHub Exploit DB Packet Storm

226220	3.5	注意	IBM	-	IBM TADDM の Data Management Portal Web User Interface におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5942	2013-03-7 19:16	2013-03-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223751	9.8	CRITICAL Network	gitlab	gitlab	Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal.	CWE-22 Path Traversal	CVE-2019-19088	2024-11-21 13:34	2020-01-4	Show	GitHub Exploit DB Packet Storm

223752	4.3	MEDIUM Network	gitlab	gitlab	Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19087	2024-11-21 13:34	2020-01-4	Show	GitHub Exploit DB Packet Storm

223753	4.3	MEDIUM Network	gitlab	gitlab	Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2).	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19086	2024-11-21 13:34	2020-01-4	Show	GitHub Exploit DB Packet Storm

223754	6.5	MEDIUM Adjacent	huawei	p30_firmware	HUAWEI P30 smart phones with versions earlier than 10.0.0.166(C00E66R1P11) have an information leak vulnerability. An attacker could send specific command in the local area network (LAN) to exploit t…	NVD-CWE-noinfo	CVE-2019-19441	2024-11-21 13:34	2020-01-4	Show	GitHub Exploit DB Packet Storm

223755	8.1	HIGH Network	xmlblueprint	xmlblueprint	XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an XML File is validated. The component is: XML Validate function. The attack vect…	CWE-611 XXE	CVE-2019-19032	2024-11-21 13:34	2019-12-31	Show	GitHub Exploit DB Packet Storm

223756	8.1	HIGH Network	edit-xml	easy_xml_editor	Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: S…	CWE-611 XXE	CVE-2019-19031	2024-11-21 13:34	2019-12-31	Show	GitHub Exploit DB Packet Storm

223757	7.8	HIGH Local	tinywall	tinywall	Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and inc…	CWE-502 Deserialization of Untrusted Data	CVE-2019-19470	2024-11-21 13:34	2019-12-31	Show	GitHub Exploit DB Packet Storm

223758	5.4	MEDIUM Network	jetbrains	ktor	JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.	CWE-74 Injection	CVE-2019-19389	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

223759	9.8	CRITICAL Network	huawei	m5_lite_10_firmware	M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to modify th…	CWE-20 Improper Input Validation	CVE-2019-19398	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

223760	5.4	MEDIUM Network	cridio	listingpro	The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.	CWE-79 Cross-site Scripting	CVE-2019-19542	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed