Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226541 5 警告 Google - Google Chrome におけるポップアップブロッカーを回避される脆弱性 CWE-noinfo
情報不足
CVE-2012-2892 2012-12-26 18:05 2012-09-25 Show GitHub Exploit DB Packet Storm
226542 5 警告 Google - Google Chrome の IPC の実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-2891 2012-12-26 18:04 2012-09-25 Show GitHub Exploit DB Packet Storm
226543 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2888 2012-12-26 18:02 2012-09-25 Show GitHub Exploit DB Packet Storm
226544 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2887 2012-12-26 18:01 2012-09-25 Show GitHub Exploit DB Packet Storm
226545 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2886 2012-12-26 18:00 2012-09-25 Show GitHub Exploit DB Packet Storm
226546 2.6 注意 VMware
Python Software Foundation
- Python SimpleHTTPServer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4940 2012-12-26 18:00 2012-06-19 Show GitHub Exploit DB Packet Storm
226547 7.5 危険 Google - Google Chrome におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2885 2012-12-26 17:59 2012-09-25 Show GitHub Exploit DB Packet Storm
226548 5 警告 Google - Google Chrome で使用される Skia におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー
CVE-2012-2884 2012-12-26 17:58 2012-09-25 Show GitHub Exploit DB Packet Storm
226549 4.6 警告 GNU Project
VMware
- GNU C Library の stdlib における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-3480 2012-12-26 17:57 2012-08-25 Show GitHub Exploit DB Packet Storm
226550 3.3 注意 GNU Project
VMware
- GNU C Library の addmntent 関数における /etc/mtab ファイルの破損を誘発される脆弱性 CWE-16
環境設定
CVE-2011-1089 2012-12-26 17:55 2011-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222721 8.1 HIGH
Network
combodo itop A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not… CWE-79
Cross-site Scripting
CVE-2019-19821 2024-11-21 13:35 2020-03-17 Show GitHub Exploit DB Packet Storm
222722 7.5 HIGH
Network
swisscom centro_grande_firmware
centro_business
Missing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro Business 1.0 (ADB) before 7.10.18, and Centro Business 2.0 before 8.02.04 allows a remote attacker to perform … CWE-20
 Improper Input Validation 
CVE-2019-19942 2024-11-21 13:35 2020-03-17 Show GitHub Exploit DB Packet Storm
222723 5.4 MEDIUM
Network
swisscom centro_grande_firmware Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames i… CWE-79
Cross-site Scripting
CVE-2019-19941 2024-11-21 13:35 2020-03-17 Show GitHub Exploit DB Packet Storm
222724 7.2 HIGH
Network
swisscom centro_grande_firmware Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro Grande before 6.16.12 allows remote authenticated users to execute arbitrary commands via command injectio… CWE-78
OS Command 
CVE-2019-19940 2024-11-21 13:35 2020-03-17 Show GitHub Exploit DB Packet Storm
222725 4.8 MEDIUM
Network
sangoma freepbx An XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the Debug/Test page of the Superfecta module at the admin/config.php?display=superfecta URI. This affects Sup… CWE-79
Cross-site Scripting
CVE-2019-19851 2024-11-21 13:35 2020-03-17 Show GitHub Exploit DB Packet Storm
222726 7.5 HIGH
Network
halvotec raquest An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session cookie for each user. … NVD-CWE-noinfo
CVE-2019-19611 2024-11-21 13:35 2020-03-14 Show GitHub Exploit DB Packet Storm
222727 5.3 MEDIUM
Network
zohocorp manageengine_applications_manager Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet. CWE-306
Missing Authentication for Critical Function
CVE-2019-19799 2024-11-21 13:35 2020-03-14 Show GitHub Exploit DB Packet Storm
222728 6.0 MEDIUM
Local
lenovo xclarity_administrator An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear t… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2019-19756 2024-11-21 13:35 2020-03-14 Show GitHub Exploit DB Packet Storm
222729 7.5 HIGH
Network
halvotec raquest An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an identical password. Fixed… CWE-74
Injection
CVE-2019-19614 2024-11-21 13:35 2020-03-10 Show GitHub Exploit DB Packet Storm
222730 5.4 MEDIUM
Network
lexmark cs31x_firmware
cs41x_firmware
cs51x_firmware
cx310_firmware
cx410_firmware
xc2130_firmware
cx510_firmware
xc2132_firmware
ms310_firmware
ms312_firmware
ms317_firmware
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935… CWE-79
Cross-site Scripting
CVE-2019-19773 2024-11-21 13:35 2020-03-7 Show GitHub Exploit DB Packet Storm