Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226531 6.5 警告 IBM - 複数の IBM 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6355 2013-02-21 18:34 2013-02-15 Show GitHub Exploit DB Packet Storm
226532 4.3 警告 IBM - IBM WebSphere Message Broker におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-119
バッファエラー
CVE-2012-5953 2013-02-21 18:34 2013-02-12 Show GitHub Exploit DB Packet Storm
226533 5 警告 IBM - IBM WebSphere Message Broker における認証されていないメッセージの送信を誘発される脆弱性 CWE-287
不適切な認証
CVE-2012-5952 2013-02-21 18:33 2013-02-12 Show GitHub Exploit DB Packet Storm
226534 3.5 注意 IBM - IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5941 2013-02-21 18:29 2013-02-20 Show GitHub Exploit DB Packet Storm
226535 4.3 警告 IBM - IBM Netezza の WebAdmin アプリケーションにおける認証情報を発見される脆弱性 CWE-287
不適切な認証
CVE-2012-5940 2013-02-21 18:28 2013-02-20 Show GitHub Exploit DB Packet Storm
226536 6.8 警告 IBM - IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5763 2013-02-21 18:26 2012-02-20 Show GitHub Exploit DB Packet Storm
226537 3.5 注意 IBM - IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5762 2013-02-21 18:25 2012-02-20 Show GitHub Exploit DB Packet Storm
226538 3.5 注意 IBM - IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5761 2013-02-21 18:24 2012-02-20 Show GitHub Exploit DB Packet Storm
226539 6.5 警告 IBM - IBM Netezza の WebAdmin アプリケーションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5760 2013-02-21 18:23 2012-02-20 Show GitHub Exploit DB Packet Storm
226540 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3328 2013-02-21 18:23 2012-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223941 8.8 HIGH
Network
sa-exim_project
debian
canonical
sa-exim
debian_linux
ubuntu_linux
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval (rather than direct parsing and/or use of the taint … CWE-78
OS Command 
CVE-2019-19920 2024-11-21 13:35 2019-12-23 Show GitHub Exploit DB Packet Storm
223942 9.8 CRITICAL
Network
handlebars.js_project
tenable
handlebars.js
tenable.sc
Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allo… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2019-19919 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223943 7.8 HIGH
Local
lout_project
opensuse
fedoraproject
lout
leap
fedora
backports_sle
Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. CWE-787
 Out-of-bounds Write
CVE-2019-19918 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223944 7.8 HIGH
Local
lout_project
opensuse
fedoraproject
lout
leap
backports_sle
fedora
Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. CWE-120
Classic Buffer Overflow
CVE-2019-19917 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223945 9.8 CRITICAL
Network
neuvector neuvector NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwords which allows an attacker with access to the Neuvector portal to authenticate as any va… CWE-521
Weak Password Requirements 
CVE-2019-19747 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223946 6.1 MEDIUM
Network
midori-browser midori In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the multipart/x-mixed-replace MIME type. This could result… CWE-79
Cross-site Scripting
CVE-2019-19916 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223947 7.1 HIGH
Local
trendmicro antivirus\+_security_2020
internet_security_2020
maximum_security_2020
premium_security_2020
The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to disclose sensitive information or to create a denial-of-service condition on af… CWE-59
Link Following
CVE-2019-19693 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223948 6.1 MEDIUM
Network
trendmicro apex_one Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that the Japanese version of the product is NOT affected. CWE-79
Cross-site Scripting
CVE-2019-19692 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223949 4.9 MEDIUM
Network
trendmicro apex_one
officescan
A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must … NVD-CWE-noinfo
CVE-2019-19691 2024-11-21 13:35 2019-12-21 Show GitHub Exploit DB Packet Storm
223950 6.1 MEDIUM
Network
ciprianmp phpmychat-plus phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable. CWE-79
Cross-site Scripting
CVE-2019-19908 2024-11-21 13:35 2019-12-20 Show GitHub Exploit DB Packet Storm