Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226591	4	警告	Moodle	-	Moodle におけるカスタム結果を標準のサイト全体の成果に変換される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6098	2013-01-29 16:51	2013-01-21	Show	GitHub Exploit DB Packet Storm

226592	5	警告	General Electric Company	-	GE Intelligent Platforms Proficy Real-Time Information Portal におけるユーザ名のリストを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0652	2013-01-29 16:49	2013-01-22	Show	GitHub Exploit DB Packet Storm

226593	5	警告	General Electric Company	-	GE Intelligent Platforms Proficy Real-Time Information Portal における設定ファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0651	2013-01-29 16:48	2013-01-22	Show	GitHub Exploit DB Packet Storm

226594	6.8	警告	レッドハット	-	FreeIPA のクライアントにおけるドメイン参加の処理を偽装される脆弱性	CWE-310 暗号の問題	CVE-2012-5484	2013-01-29 16:48	2013-01-23	Show	GitHub Exploit DB Packet Storm

226595	5	警告	トリップアドバイザー	-	TripAdvisor for iOS における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-4917	2013-01-29 16:47	2013-01-26	Show	GitHub Exploit DB Packet Storm

226596	9.3	危険	CoolPDF Software	-	CoolPDF の Reader におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4914	2013-01-29 16:47	2013-01-26	Show	GitHub Exploit DB Packet Storm

226597	10	危険	ヒューレット・パッカード	-	HP Diagnostics Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3278	2013-01-29 16:43	2013-01-22	Show	GitHub Exploit DB Packet Storm

226598	5.8	警告	Novell	-	WebYaST にホスト一覧を改ざんされる脆弱性	CWE-noinfo 情報不足	CVE-2012-0435	2013-01-29 14:10	2013-01-28	Show	GitHub Exploit DB Packet Storm

226599	10	危険	IBM	-	IBM WebSphere Application Server における脆弱性	CWE-noinfo 情報不足	CVE-2013-0462	2013-01-29 11:49	2013-01-23	Show	GitHub Exploit DB Packet Storm

226600	4.3	警告	IBM	-	IBM WebSphere Application Server の Virtual Member Manager 管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0461	2013-01-29 11:49	2013-01-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224251	7.5	HIGH Network	drupal	svg_sanitizer	A Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for Drupal because access to external resources with an SVG use element is mishandled.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-18856	2024-11-21 13:33	2019-11-12	Show	GitHub Exploit DB Packet Storm

224252	7.5	HIGH Network	10up	safe_svg	A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes.	NVD-CWE-noinfo	CVE-2019-18855	2024-11-21 13:33	2019-11-12	Show	GitHub Exploit DB Packet Storm

224253	7.5	HIGH Network	10up	safe_svg	A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '<use ... xlink:href="#identifier">' substring.	CWE-674 Uncontrolled Recursion	CVE-2019-18854	2024-11-21 13:33	2019-11-12	Show	GitHub Exploit DB Packet Storm

224254	9.0	CRITICAL Network	fudforum	fudforum	FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET reques…	CWE-79 CWE-78 Cross-site Scripting OS Command	CVE-2019-18873	2024-11-21 13:33	2019-11-12	Show	GitHub Exploit DB Packet Storm

224255	6.5	MEDIUM Network	imagemagick	imagemagick	ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.	CWE-674 Uncontrolled Recursion	CVE-2019-18853	2024-11-21 13:33	2019-11-12	Show	GitHub Exploit DB Packet Storm

224256	9.8	CRITICAL Network	dlink	dir-600_b1_firmware dir-615_j1_firmware dir-645_a1_firmware dir-815_a1_firmware dir-823_a1_firmware dir-842_c1_firmware dir-890l_a1_firmware	Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-18852	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

224257	5.5	MEDIUM Local	tnef_project fedoraproject canonical debian	tnef fedora ubuntu_linux debian_linux	In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-ba…	CWE-125 Out-of-bounds Read	CVE-2019-18849	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

224258	7.3	HIGH Network	chartkick	chartkick.js	Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.	NVD-CWE-noinfo	CVE-2019-18841	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

224259	7.5	HIGH Network	envoyproxy istio	envoy istio	Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-18836	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

224260	7.1	HIGH Local	patriotmemory	viper_rgb_firmware	The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT A…	CWE-269 Improper Privilege Management	CVE-2019-18845	2024-11-21 13:33	2019-11-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed