Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226231	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-6465	2013-01-7 16:46	2012-11-6	Show	GitHub Exploit DB Packet Storm

226232	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6464	2013-01-7 16:46	2012-11-6	Show	GitHub Exploit DB Packet Storm

226233	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6463	2013-01-7 16:42	2012-11-6	Show	GitHub Exploit DB Packet Storm

226234	5	警告	Opera Software ASA	-	Opera におけるページコンテンツの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6462	2013-01-7 16:41	2012-11-6	Show	GitHub Exploit DB Packet Storm

226235	5	警告	Opera Software ASA	-	Opera の HTTPS の実装における失効ステータスチェック結果が間違って表示される脆弱性	CWE-20 不適切な入力確認	CVE-2012-6461	2013-01-7 16:37	2012-11-6	Show	GitHub Exploit DB Packet Storm

226236	5	警告	Opera Software ASA	-	Opera における任意のプログラムをダウンロードおよび実行される脆弱性	CWE-Other その他	CVE-2012-6460	2013-01-7 16:36	2012-08-30	Show	GitHub Exploit DB Packet Storm

226237	6.8	警告	e107.org	-	e107 の e107_admin/download.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-6434	2013-01-7 16:26	2013-01-3	Show	GitHub Exploit DB Packet Storm

226238	6.8	警告	e107.org	-	e107 の e107_admin/newspost.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-6433	2013-01-7 16:15	2013-01-3	Show	GitHub Exploit DB Packet Storm

226239	6	警告	MoinMoin	-	MoinMoin におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-6495	2013-01-7 16:04	2012-12-29	Show	GitHub Exploit DB Packet Storm

226240	4.3	警告	MoinMoin	-	MoinMoin の theme/__init__.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6082	2013-01-7 16:02	2012-12-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223291	8.2	HIGH Network	-	-	A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulner…	CWE-79 Cross-site Scripting	CVE-2019-18426	2024-11-21 13:33	2020-01-22	Show	GitHub Exploit DB Packet Storm

223292	7.0	HIGH Local	squid_analysis_report_generator_project opensuse	squid_analysis_report_generator leap backports_sle	log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this direct…	CWE-362 CWE-59 Race Condition Link Following	CVE-2019-18932	2024-11-21 13:33	2020-01-22	Show	GitHub Exploit DB Packet Storm

223293	7.5	HIGH Network	jetbrains	idetalk	JetBrains IDETalk plugin before version 193.4099.10 allows XXE	CWE-611 XXE	CVE-2019-18412	2024-11-21 13:33	2020-01-16	Show	GitHub Exploit DB Packet Storm

223294	7.8	HIGH Local	avast	premium_security	In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port 27275 to support Bank Mode functionality. A flaw in the proc…	CWE-78 OS Command	CVE-2019-18894	2024-11-21 13:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

223295	5.4	MEDIUM Network	dell	emc_unisphere_for_powermax emc_powermax	Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scri…	CWE-79 Cross-site Scripting	CVE-2019-18588	2024-11-21 13:33	2020-01-11	Show	GitHub Exploit DB Packet Storm

223296	6.1	MEDIUM Network	video_downloader_project avg avast	video_downloader secure_browser	XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code in the context of this component. While…	CWE-79 Cross-site Scripting	CVE-2019-18893	2024-11-21 13:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

223297	6.1	MEDIUM Network	digi	anywhereusb\/14_firmware	Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.	CWE-79 Cross-site Scripting	CVE-2019-18859	2024-11-21 13:33	2020-01-10	Show	GitHub Exploit DB Packet Storm

223298	6.1	MEDIUM Network	watchguard	xmt515_firmware	A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clickin…	CWE-79 Cross-site Scripting	CVE-2019-18652	2024-11-21 13:33	2020-01-8	Show	GitHub Exploit DB Packet Storm

223299	8.7	HIGH Network	unisys	mcp_firmware	Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecified impact when receiving specifically crafted message payloads over a systems …	NVD-CWE-noinfo	CVE-2019-18386	2024-11-21 13:33	2020-01-8	Show	GitHub Exploit DB Packet Storm

223300	6.1	MEDIUM Network	usriot	usr-wifi232-s_firmware usr-wifi232-t_firmware usr-wifi232-g2_firmware usr-wifi232-h_firmware	A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentia…	CWE-79 Cross-site Scripting	CVE-2019-18842	2024-11-21 13:33	2020-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed