Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226531	2.1	注意	OpenStack	-	OpenStack Keystone の tools/sample_data.sh における Amazon EC2 へのアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5483	2013-01-21 17:53	2012-12-26	Show	GitHub Exploit DB Packet Storm

226532	5	警告	TWiki Foswiki	-	TWiki および Foswiki におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-189 数値処理の問題	CVE-2012-6330	2013-01-21 17:50	2012-12-14	Show	GitHub Exploit DB Packet Storm

226533	5.5	警告	オラクル	-	Oracle E-Business Suite の Human Resources におけるセキュリティ・グループの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3218	2013-01-21 16:19	2013-01-15	Show	GitHub Exploit DB Packet Storm

226534	4.3	警告	オラクル	-	複数の Oracle Enterprise Manager 製品における User Interface Framework の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5062	2013-01-21 16:16	2013-01-15	Show	GitHub Exploit DB Packet Storm

226535	5	警告	オラクル	-	Oracle Siebel CRM における Highly Interactive Web UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1701	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

226536	5	警告	オラクル	-	Oracle Siebel CRM における Siebel Core - Server Infrastructure の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3170	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

226537	5	警告	オラクル	-	Oracle Siebel CRM における Siebel Core - Server Infrastructure の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3169	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

226538	4	警告	オラクル	-	Oracle Siebel CRM における Siebel Apps - Multi-channel Technologies の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1680	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

226539	4	警告	オラクル	-	Oracle Siebel CRM における Siebel Apps - Multi-channel Technologies の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3172	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

226540	4	警告	オラクル	-	Oracle Siebel CRM における Siebel Core - Server Infrastructure の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3168	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224001	6.1	MEDIUM Network	pfsense	pfsense-pkg-freeradius3	/usr/local/www/freeradius_view_config.php in the freeradius3 package before 0.15.7_3 for pfSense on FreeBSD allows a user with an XSS payload as password or username to execute arbitrary javascript c…	CWE-79 Cross-site Scripting	CVE-2019-18667	2024-11-21 13:33	2019-11-3	Show	GitHub Exploit DB Packet Storm

224002	7.5	HIGH Network	secudos	domos	The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.	CWE-22 Path Traversal	CVE-2019-18665	2024-11-21 13:33	2019-11-3	Show	GitHub Exploit DB Packet Storm

224003	5.4	MEDIUM Network	secudos	domos	The Log module in SECUDOS DOMOS before 5.6 allows XSS.	CWE-79 Cross-site Scripting	CVE-2019-18664	2024-11-21 13:33	2019-11-3	Show	GitHub Exploit DB Packet Storm

224004	7.5	HIGH Network	fastweb	fastgate_firmware	Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, t…	CWE-287 Improper Authentication	CVE-2019-18661	2024-11-21 13:33	2019-11-2	Show	GitHub Exploit DB Packet Storm

224005	5.3	MEDIUM Network	ready	wireless_emergency_alerts	The Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE S…	CWE-290 Authentication Bypass by Spoofing	CVE-2019-18659	2024-11-21 13:33	2019-11-2	Show	GitHub Exploit DB Packet Storm

224006	6.5	MEDIUM Network	wpwham	currency_switcher_for_woocommerce	An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-18668	2024-11-21 13:33	2019-11-3	Show	GitHub Exploit DB Packet Storm

224007	9.8	CRITICAL Network	youphptube	youphptube	An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plugin/LiveChat/getChat.json.php is not properly sanitized (in getFromChat in plug…	CWE-89 SQL Injection	CVE-2019-18662	2024-11-21 13:33	2019-11-3	Show	GitHub Exploit DB Packet Storm

224008	6.1	MEDIUM Network	avg	anti-virus	A Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to execute JavaScript code…	CWE-79 Cross-site Scripting	CVE-2019-18654	2024-11-21 13:33	2019-11-2	Show	GitHub Exploit DB Packet Storm

224009	6.1	MEDIUM Network	avast	antivirus	A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to e…	CWE-79 Cross-site Scripting	CVE-2019-18653	2024-11-21 13:33	2019-11-2	Show	GitHub Exploit DB Packet Storm

224010	5.4	MEDIUM Network	jitbit	.net_forum	A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter.	CWE-79 Cross-site Scripting	CVE-2019-18636	2024-11-21 13:33	2019-11-1	Show	GitHub Exploit DB Packet Storm