Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226551	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における設定ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0786	2013-03-26 14:44	2011-06-10	Show	GitHub Exploit DB Packet Storm

226552	2.6	注意	株式会社ピーエムナイン	-	OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2300	2013-03-26 12:02	2013-03-26	Show	GitHub Exploit DB Packet Storm

226553	2.6	注意	COB's Products	-	COBIME におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0720	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

226554	2.6	注意	codedesign.jp	-	ArtIME 日本語入力におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0719	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

226555	2.6	注意	Baidu, Inc.	-	Simeji におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0718	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

226556	6.8	警告	Verizon	-	Verizon FiOS Actiontec ルータ MI424WR-GEN3I にクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0126	2013-03-26 10:48	2013-03-19	Show	GitHub Exploit DB Packet Storm

226557	4.3	警告	Askia	-	ASKIA askiaweb の管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0124	2013-03-25 19:10	2013-03-20	Show	GitHub Exploit DB Packet Storm

226558	7.5	危険	Askia	-	ASKIA askiaweb の管理インターフェイスにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-0123	2013-03-25 19:09	2013-03-20	Show	GitHub Exploit DB Packet Storm

226559	3.5	注意	IBM	-	IBM Tivoli Endpoint Manager の Web レポートにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0453	2013-03-25 19:09	2013-03-20	Show	GitHub Exploit DB Packet Storm

226560	4.3	警告	IBM	-	IBM Rational ClearQuest の Web クライアントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5757	2013-03-25 19:08	2013-03-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224581	5.5	MEDIUM Local	gpac debian	gpac debian_linux	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.	CWE-787 Out-of-bounds Write	CVE-2019-20161	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

224582	5.5	MEDIUM Local	gpac	gpac	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in media_tools/av_parsers.c.	CWE-787 Out-of-bounds Write	CVE-2019-20160	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

224583	5.5	MEDIUM Local	gpac	gpac	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-20159	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

224584	7.5	HIGH Network	kind-of_project	kind-of	ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafte…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-20149	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

224585	6.1	MEDIUM Network	laborator	neon	An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.	CWE-79 Cross-site Scripting	CVE-2019-20141	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

224586	5.4	MEDIUM Network	nagios	nagios_xi	In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin …	CWE-79 Cross-site Scripting	CVE-2019-20139	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

224587	7.5	HIGH Network	http_authentication_library_project	http_authentication_library	The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is not used.	CWE-327 CWE-916 Use of a Broken or Risky Cryptographic Algorithm Use of Password Hash With Insufficient Computational Effort	CVE-2019-20138	2024-11-21 13:38	2019-12-30	Show	GitHub Exploit DB Packet Storm

224588	5.5	MEDIUM Local	linux debian canonical	linux_kernel debian_linux ubuntu_linux	In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-20096	2024-11-21 13:38	2019-12-30	Show	GitHub Exploit DB Packet Storm

224589	5.5	MEDIUM Local	linux opensuse netapp	linux_kernel leap cloud_backup steelstore_cloud_integrated_storage data_availability_services solidfire hci_management_node active_iq_unified_manager e-series_santricity_os_co…	mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-20095	2024-11-21 13:38	2019-12-30	Show	GitHub Exploit DB Packet Storm

224590	5.5	MEDIUM Local	podofo_project fedoraproject	podofo fedora	The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtrac…	CWE-476 NULL Pointer Dereference	CVE-2019-20093	2024-11-21 13:38	2019-12-30	Show	GitHub Exploit DB Packet Storm