Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226561	4.3	警告	Stoneware	-	Stoneware webNetwork におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4352	2013-02-19 16:52	2012-09-12	Show	GitHub Exploit DB Packet Storm

226562	6.9	警告	シマンテック	-	Symantec PGP Desktop および Encryption Desktop における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-4351	2013-02-19 16:51	2013-02-13	Show	GitHub Exploit DB Packet Storm

226563	5.2	警告	Linux	-	Linux Kernel の Xen netback 機能におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0217	2013-02-19 16:48	2013-02-14	Show	GitHub Exploit DB Packet Storm

226564	2.1	注意	Linux	-	Linux Kernel の fs/binfmt_script.c の load_script 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-4530	2013-02-19 16:46	2013-01-11	Show	GitHub Exploit DB Packet Storm

226565	4.9	警告	Linux	-	Linux Kernel の kernel/kmod.c の __request_module 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4398	2013-02-19 16:45	2013-02-18	Show	GitHub Exploit DB Packet Storm

226566	6.8	警告	ヒューレット・パッカード	-	HP ArcSight Connector Appliance および ArcSight Logger における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-5199	2013-02-19 16:42	2013-02-14	Show	GitHub Exploit DB Packet Storm

226567	5	警告	ヒューレット・パッカード	-	HP ArcSight Connector Appliance および ArcSight Logger における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5198	2013-02-19 16:41	2013-02-14	Show	GitHub Exploit DB Packet Storm

226568	6.5	警告	ヒューレット・パッカード	-	HP ArcSight Connector Appliance および ArcSight Logger における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-3286	2013-02-19 16:41	2013-02-14	Show	GitHub Exploit DB Packet Storm

226569	6.8	警告	シスコシステムズ	-	Cisco Unity Express におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-1120	2013-02-18 17:18	2013-02-1	Show	GitHub Exploit DB Packet Storm

226570	4.3	警告	libssh	-	libssh の publickey_from_privatekey 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0176	2013-02-18 17:15	2013-01-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224471	5.3	MEDIUM Network	misp	misp	In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.	NVD-CWE-noinfo	CVE-2019-19379	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

224472	6.5	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of ser…	CWE-20 CWE-476 Improper Input Validation NULL Pointer Dereference	CVE-2019-19376	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

224473	5.3	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versio…	CWE-352 Origin Validation Error	CVE-2019-19375	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

224474	7.5	HIGH Network	rconfig	rconfig	A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later r…	CWE-22 Path Traversal	CVE-2019-19372	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

224475	6.5	MEDIUM Local	linux redhat opensuse	linux_kernel enterprise_linux leap	In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/x…	CWE-787 CWE-416 Out-of-bounds Write Use After Free	CVE-2019-19319	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

224476	4.4	MEDIUM Local	linux opensuse canonical debian netapp	linux_kernel leap ubuntu_linux debian_linux steelstore_cloud_integrated_storage active_iq_unified_manager data_availability_services solidfire hci_management_node aff_a700s…	In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags…	CWE-416 Use After Free	CVE-2019-19318	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

224477	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.	CWE-79 Cross-site Scripting	CVE-2019-19367	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

224478	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.	CWE-79 Cross-site Scripting	CVE-2019-19366	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

224479	5.9	MEDIUM Network	sqlite canonical redhat oracle siemens	sqlite ubuntu_linux enterprise_linux mysql_workbench sinec_infrastructure_network_services	SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.	CWE-476 NULL Pointer Dereference	CVE-2019-19242	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

224480	9.8	CRITICAL Network	haproxy canonical debian	haproxy ubuntu_linux debian_linux	The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Inte…	CWE-74 Injection	CVE-2019-19330	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed