Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226491 4 警告 シスコシステムズ - Cisco WebEx Training Center における権限による制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1110 2013-01-23 16:30 2013-01-16 Show GitHub Exploit DB Packet Storm
226492 4 警告 シスコシステムズ - Cisco WebEx Training Center におけるハンズオンラボセッションの予約を削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1108 2013-01-23 16:30 2013-01-15 Show GitHub Exploit DB Packet Storm
226493 7.6 危険 DELL EMC (旧 EMC Corporation) - EMC AlphaStor の Device Manager におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2013-0929 2013-01-23 16:29 2013-01-21 Show GitHub Exploit DB Packet Storm
226494 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC AlphaStor の Device Manager における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-0928 2013-01-23 16:28 2013-01-21 Show GitHub Exploit DB Packet Storm
226495 6.8 警告 シーメンス - Siemens SIMATIC RF-MANAGER および RF-MANAGER Basic におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0656 2013-01-23 16:28 2013-01-11 Show GitHub Exploit DB Packet Storm
226496 7.2 危険 DELL EMC (旧 EMC Corporation) - EMC Avamar Client および EMC Avamar Plugin における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2291 2013-01-23 16:25 2013-01-21 Show GitHub Exploit DB Packet Storm
226497 10 危険 Schneider Electric - Schneider Electric Interactive Graphical SCADA System におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0657 2013-01-23 16:24 2013-01-10 Show GitHub Exploit DB Packet Storm
226498 9.3 危険 Schneider Electric - Schneider Electric Software Update Utility のクライアントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0655 2013-01-23 16:24 2013-01-9 Show GitHub Exploit DB Packet Storm
226499 5 警告 サン・マイクロシステムズ - Oracle Java SE の Java Runtime Environment における JMX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-5070 2013-01-23 16:13 2012-10-16 Show GitHub Exploit DB Packet Storm
226500 7.5 危険 VMware - VMware SpringSource Spring Framework における重要な情報を取得される脆弱性 CWE-16
環境設定 		CVE-2011-2730 2013-01-23 14:03 2011-09-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223961 5.5 MEDIUM
Local 		tnef_project
fedoraproject
canonical
debian 		tnef
fedora
ubuntu_linux
debian_linux 		In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-ba… CWE-125
Out-of-bounds Read 		CVE-2019-18849 2024-11-21 13:33 2019-11-11 Show GitHub Exploit DB Packet Storm
223962 7.3 HIGH
Network 		chartkick chartkick.js Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution. NVD-CWE-noinfo
CVE-2019-18841 2024-11-21 13:33 2019-11-11 Show GitHub Exploit DB Packet Storm
223963 7.5 HIGH
Network 		envoyproxy
istio 		envoy
istio 		Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-18836 2024-11-21 13:33 2019-11-11 Show GitHub Exploit DB Packet Storm
223964 7.1 HIGH
Local 		patriotmemory viper_rgb_firmware The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT A… CWE-269
 Improper Privilege Management 		CVE-2019-18845 2024-11-21 13:33 2019-11-10 Show GitHub Exploit DB Packet Storm
223965 7.5 HIGH
Network 		wolfssl wolfssl In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow i… CWE-787
 Out-of-bounds Write 		CVE-2019-18840 2024-11-21 13:33 2019-11-9 Show GitHub Exploit DB Packet Storm
223966 9.8 CRITICAL
Network 		energycap energycap Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with acce… CWE-269
 Improper Privilege Management 		CVE-2019-18623 2024-11-21 13:33 2019-11-9 Show GitHub Exploit DB Packet Storm
223967 9.8 CRITICAL
Network 		matrix synapse Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-18835 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm
223968 9.8 CRITICAL
Network 		strapi strapi strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2019-18818 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm
223969 5.5 MEDIUM
Local 		eximioussoft logo_designer Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053. CWE-787
 Out-of-bounds Write 		CVE-2019-18821 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm
223970 5.5 MEDIUM
Local 		eximioussoft logo_designer Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78. CWE-787
 Out-of-bounds Write 		CVE-2019-18820 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm