Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226291 2.1 注意 Debian - Ubuntu で使用される APT における重要なシェル情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0961 2012-12-28 14:59 2012-12-12 Show GitHub Exploit DB Packet Storm
226292 4.3 警告 PS Project Management Team - Firefox 用 Unity integration 拡張機能における同一生成元ポリシーを回避される脆弱性 CWE-DesignError
CVE-2012-0958 2012-12-28 14:58 2012-10-23 Show GitHub Exploit DB Packet Storm
226293 - - Ruby on Rails project - ** 削除 ** Ruby on Rails 用 Authlogic gem における SQL インジェクションの脆弱性 - CVE-2012-5664 2012-12-28 14:22 2012-12-26 Show GitHub Exploit DB Packet Storm
226294 4.3 警告 Opera Software ASA - Android 版 Opera Mini ウェブブラウザおよび Opera Mobile ウェブブラウザにおいて任意のスクリプトが実行される脆弱性 CWE-200
情報漏えい
CVE-2012-5180 2012-12-28 14:17 2012-12-20 Show GitHub Exploit DB Packet Storm
226295 2.6 注意 WordPress.org - WordPress における有効なセッション識別子を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5868 2012-12-28 11:58 2012-12-27 Show GitHub Exploit DB Packet Storm
226296 4.9 警告 Linux - Linux Kernel と一緒に配布される hypervkvpd におけるサービス運用妨害 (Daemon Exit) の脆弱性 CWE-noinfo
情報不足
CVE-2012-5532 2012-12-28 11:44 2012-12-22 Show GitHub Exploit DB Packet Storm
226297 5 警告 シトリックス・システムズ - Citrix XenDesktop Virtual Desktop Agent における USB デバイスへのアクセス権を保持される脆弱性 CWE-noinfo
情報不足
CVE-2012-6314 2012-12-28 11:20 2012-12-11 Show GitHub Exploit DB Packet Storm
226298 9.3 危険 シトリックス・システムズ - Citrix XenApp の XML Service インターフェースにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-5161 2012-12-28 11:08 2012-12-11 Show GitHub Exploit DB Packet Storm
226299 10 危険 CA Technologies - CA IdentityMinder におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2012-6299 2012-12-28 10:58 2012-12-20 Show GitHub Exploit DB Packet Storm
226300 10 危険 CA Technologies - CA IdentityMinder における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-6298 2012-12-28 10:57 2012-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223201 7.8 HIGH
Local
linux
netapp
linux_kernel
cloud_backup
steelstore_cloud_integrated_storage
active_iq_unified_manager
solidfire_baseboard_management_controller
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. CWE-416
 Use After Free
CVE-2019-19377 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223202 9.1 CRITICAL
Network
luajit
moonjit_project
luajit
moonjit
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases in… CWE-843
Type Confusion
CVE-2019-19391 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
223203 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplan_uuid parameter. CWE-79
Cross-site Scripting
CVE-2019-19388 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223204 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter. CWE-79
Cross-site Scripting
CVE-2019-19387 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223205 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or v… CWE-79
Cross-site Scripting
CVE-2019-19386 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223206 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter. CWE-79
Cross-site Scripting
CVE-2019-19385 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223207 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the fax_uuid parameter. CWE-79
Cross-site Scripting
CVE-2019-19384 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223208 5.3 MEDIUM
Network
misp misp In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data. NVD-CWE-noinfo
CVE-2019-19379 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223209 6.5 MEDIUM
Network
octopus octopus_deploy In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of ser… CWE-20
CWE-476
 Improper Input Validation 
 NULL Pointer Dereference
CVE-2019-19376 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
223210 5.3 MEDIUM
Network
octopus octopus_deploy In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versio… CWE-352
 Origin Validation Error
CVE-2019-19375 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm