Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226361 7.5 危険 マイクロソフト - Microsoft SharePoint Server および SharePoint Foundation における読み取り制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0080 2013-03-18 17:59 2013-03-12 Show GitHub Exploit DB Packet Storm
226362 4.3 警告 マイクロソフト - Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0083 2013-03-18 17:57 2013-03-12 Show GitHub Exploit DB Packet Storm
226363 7.5 危険 マイクロソフト - Microsoft SharePoint Server および SharePoint Foundation におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-0084 2013-03-18 17:55 2013-03-12 Show GitHub Exploit DB Packet Storm
226364 7.8 危険 マイクロソフト - Microsoft SharePoint Server および SharePoint Foundation におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0085 2013-03-18 17:54 2013-03-12 Show GitHub Exploit DB Packet Storm
226365 5 警告 マイクロソフト - Microsoft OneNote における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2013-0086 2013-03-18 17:51 2013-03-12 Show GitHub Exploit DB Packet Storm
226366 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0087 2013-03-18 17:50 2013-03-12 Show GitHub Exploit DB Packet Storm
226367 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0088 2013-03-18 17:48 2013-03-12 Show GitHub Exploit DB Packet Storm
226368 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0089 2013-03-18 17:45 2013-03-12 Show GitHub Exploit DB Packet Storm
226369 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0090 2013-03-18 17:30 2013-03-12 Show GitHub Exploit DB Packet Storm
226370 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0091 2013-03-18 17:28 2013-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224041 8.8 HIGH
Network 		nopcommerce nopcommerce RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions. CWE-352
 Origin Validation Error 		CVE-2019-19685 2024-11-21 13:35 2019-12-10 Show GitHub Exploit DB Packet Storm
224042 8.8 HIGH
Network 		nopcommerce nopcommerce nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-19684 2024-11-21 13:35 2019-12-10 Show GitHub Exploit DB Packet Storm
224043 9.1 CRITICAL
Network 		nopcommerce nopcommerce RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFileman… CWE-22
Path Traversal 		CVE-2019-19683 2024-11-21 13:35 2019-12-10 Show GitHub Exploit DB Packet Storm
224044 4.8 MEDIUM
Network 		nopcommerce nopcommerce nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Controllers\NewsController.cs and \Presentation\Nop.Web\Areas\Admin\Controllers\BlogCo… CWE-79
Cross-site Scripting 		CVE-2019-19682 2024-11-21 13:35 2019-12-10 Show GitHub Exploit DB Packet Storm
224045 5.4 MEDIUM
Network 		xpand-it xray_test_mangaement In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action… CWE-79
Cross-site Scripting 		CVE-2019-19679 2024-11-21 13:35 2019-12-10 Show GitHub Exploit DB Packet Storm
224046 5.4 MEDIUM
Network 		xpand-it xray_test_mangaement In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test is… CWE-79
Cross-site Scripting 		CVE-2019-19678 2024-11-21 13:35 2019-12-10 Show GitHub Exploit DB Packet Storm
224047 5.5 MEDIUM
Local 		sqlite
netapp
oracle
tenable
siemens 		sqlite
cloud_backup
ontap_select_deploy_administration_utility
mysql_workbench
tenable.sc
sinec_infrastructure_network_services 		alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. CWE-674
 Uncontrolled Recursion 		CVE-2019-19645 2024-11-21 13:35 2019-12-10 Show GitHub Exploit DB Packet Storm
224048 7.8 HIGH
Local 		virustotal
fedoraproject 		yara
fedora 		In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, re… CWE-125
Out-of-bounds Read 		CVE-2019-19648 2024-11-21 13:35 2019-12-9 Show GitHub Exploit DB Packet Storm
224049 7.8 HIGH
Local 		radare
fedoraproject 		radare2
fedora 		radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a… CWE-476
 NULL Pointer Dereference 		CVE-2019-19647 2024-11-21 13:35 2019-12-9 Show GitHub Exploit DB Packet Storm
224050 8.8 HIGH
Network 		supermicro x8sti-f_bios
x8sti-f_firmware 		On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP a… CWE-78
OS Command  		CVE-2019-19642 2024-11-21 13:35 2019-12-8 Show GitHub Exploit DB Packet Storm