Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226491	6.5	警告	Open Constructor	-	Open Constructor における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-3873	2013-01-4 14:47	2012-12-28	Show	GitHub Exploit DB Packet Storm

226492	4.3	警告	Open Constructor	-	Open Constructor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3872	2013-01-4 14:46	2012-12-28	Show	GitHub Exploit DB Packet Storm

226493	3.5	注意	Open Constructor	-	Open Constructor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3871	2013-01-4 14:22	2012-12-28	Show	GitHub Exploit DB Packet Storm

226494	3.5	注意	Open Constructor	-	Open Constructor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3870	2013-01-4 14:22	2012-12-28	Show	GitHub Exploit DB Packet Storm

226495	3.3	注意	サムスン	-	複数の Samsung Galaxy デバイス上の Android 用 SamsungDive におけるデバイスの発見を妨害される脆弱性	CWE-200 情報漏えい	CVE-2012-6337	2013-01-4 14:07	2012-12-31	Show	GitHub Exploit DB Packet Storm

226496	3.3	注意	Lookout Mobile Security	-	Lookout の端末捜索機能における任意の位置データに偽装される脆弱性	CWE-noinfo 情報不足	CVE-2012-6336	2013-01-4 14:04	2012-12-31	Show	GitHub Exploit DB Packet Storm

226497	3.3	注意	AVG Technologies	-	Android 用 AVG AntiVirus の Anti-theft サービスにおける任意の位置データに偽装される脆弱性	CWE-noinfo 情報不足	CVE-2012-6335	2013-01-4 14:03	2012-12-31	Show	GitHub Exploit DB Packet Storm

226498	5.8	警告	IBM	-	IBM Security AppScan Enterprise および Rational Policy Tester における SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-0741	2013-01-4 12:09	2012-12-28	Show	GitHub Exploit DB Packet Storm

226499	5.8	警告	IBM	-	IBM Security AppScan Enterprise および Rational Policy Tester における SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-0738	2013-01-4 12:08	2012-12-28	Show	GitHub Exploit DB Packet Storm

226500	5	警告	IBM Apache Software Foundation 富士通サイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクル日立レッドハット	-	Apache Portable Utility ライブラリの apr_brigade_split_line 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-1623	2012-12-28 18:39	2010-10-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223911	8.8	HIGH Network	dlink	dir-615_firmware	The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-17525	2024-11-21 13:32	2020-04-22	Show	GitHub Exploit DB Packet Storm

223912	7.5	HIGH Network	fortinet	fortiap-w2 fortiap-s fortiswitch fortianalyzer fortimanager	An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an…	CWE-400 Uncontrolled Resource Consumption	CVE-2019-17657	2024-11-21 13:32	2020-04-8	Show	GitHub Exploit DB Packet Storm

223913	9.8	CRITICAL Network	apache	dubbo	Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance o…	CWE-502 Deserialization of Untrusted Data	CVE-2019-17564	2024-11-21 13:32	2020-04-2	Show	GitHub Exploit DB Packet Storm

223914	7.5	HIGH Network	apache oracle	netbeans graalvm	The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and includin…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2019-17561	2024-11-21 13:32	2020-03-31	Show	GitHub Exploit DB Packet Storm

223915	9.1	CRITICAL Network	apache oracle	netbeans graalvm	The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the downlo…	CWE-295 Improper Certificate Validation	CVE-2019-17560	2024-11-21 13:32	2020-03-31	Show	GitHub Exploit DB Packet Storm

223916	5.4	MEDIUM Network	netapp	oncommand_system_manager	OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated attacker to inject arbitrary scr…	CWE-79 Cross-site Scripting	CVE-2019-17276	2024-11-21 13:32	2020-03-25	Show	GitHub Exploit DB Packet Storm

223917	7.5	HIGH Network	moxa	iologik_2512_firmware iologik_2512-t_firmware iologik_2512-hspa_firmware iologik_2512-hspa-t_firmware iologik_2512-wl1-eu_firmware iologik_2512-wl1-eu-t_firmware iologik_2512-wl1-us…	In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to f…	NVD-CWE-noinfo	CVE-2019-18242	2024-11-21 13:32	2020-03-25	Show	GitHub Exploit DB Packet Storm

223918	9.8	CRITICAL Network	apache debian	traffic_server debian_linux	There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and chunked encoding. Upgrade to versions 7.1.9 and 8.0.6 or later version…	CWE-444 HTTP Request Smuggling	CVE-2019-17565	2024-11-21 13:32	2020-03-24	Show	GitHub Exploit DB Packet Storm

223919	9.8	CRITICAL Network	apache debian	traffic_server debian_linux	There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and scheme parsing. Upgrade to versions 7.1.9 and 8.0.6 or later versions.	CWE-444 HTTP Request Smuggling	CVE-2019-17559	2024-11-21 13:32	2020-03-24	Show	GitHub Exploit DB Packet Storm

223920	8.8	HIGH Network	fortinet	fortimanager	An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH)…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-17654	2024-11-21 13:32	2020-03-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed