Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226691	2.1	注意	Mixpanel Project	-	Drupal 用 Mixpanel モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5585	2012-12-28 15:50	2012-11-28	Show	GitHub Exploit DB Packet Storm

226692	4.3	警告	Made to Order Software	-	Drupal 用 Table of Contents モジュールにおけるノードのヘッダを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5584	2012-12-28 15:49	2012-11-14	Show	GitHub Exploit DB Packet Storm

226693	6.8	警告	Sensio Labs	-	Symfony における任意のサービスにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6432	2012-12-28 15:20	2012-12-20	Show	GitHub Exploit DB Packet Storm

226694	6.4	警告	Sensio Labs	-	Symfony における URI の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6431	2012-12-28 15:18	2012-12-20	Show	GitHub Exploit DB Packet Storm

226695	4.3	警告	Sebastian Heinlein Canonical	-	Ubuntu の Aptdaemon における任意のパッケージレポジトリの GPG キーをインストールされる脆弱性	CWE-noinfo 情報不足	CVE-2012-0962	2012-12-28 15:03	2012-12-17	Show	GitHub Exploit DB Packet Storm

226696	2.1	注意	Debian	-	Ubuntu で使用される APT における重要なシェル情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-0961	2012-12-28 14:59	2012-12-12	Show	GitHub Exploit DB Packet Storm

226697	4.3	警告	PS Project Management Team	-	Firefox 用 Unity integration 拡張機能における同一生成元ポリシーを回避される脆弱性	CWE-DesignError	CVE-2012-0958	2012-12-28 14:58	2012-10-23	Show	GitHub Exploit DB Packet Storm

226698	-	-	Ruby on Rails project	-	削除 Ruby on Rails 用 Authlogic gem における SQL インジェクションの脆弱性	-	CVE-2012-5664	2012-12-28 14:22	2012-12-26	Show	GitHub Exploit DB Packet Storm

226699	4.3	警告	Opera Software ASA	-	Android 版 Opera Mini ウェブブラウザおよび Opera Mobile ウェブブラウザにおいて任意のスクリプトが実行される脆弱性	CWE-200 情報漏えい	CVE-2012-5180	2012-12-28 14:17	2012-12-20	Show	GitHub Exploit DB Packet Storm

226700	2.6	注意	WordPress.org	-	WordPress における有効なセッション識別子を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-5868	2012-12-28 11:58	2012-12-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224271	6.1	MEDIUM Network	hexo-admin_project	hexo-admin	The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.	CWE-79 Cross-site Scripting	CVE-2019-17606	2024-11-21 13:32	2019-10-24	Show	GitHub Exploit DB Packet Storm

224272	4.3	MEDIUM Network	qt debian	qtbase debian_linux	An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-18281	2024-11-21 13:32	2019-10-24	Show	GitHub Exploit DB Packet Storm

224273	8.8	HIGH Network	online_grading_system_project	online_grading_system	Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into exe…	CWE-352 Origin Validation Error	CVE-2019-18280	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224274	7.8	HIGH Local	videolan	vlc_media_player	When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. NOTE: the …	NVD-CWE-noinfo	CVE-2019-18278	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224275	8.8	HIGH Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via s…	CWE-352 Origin Validation Error	CVE-2019-18220	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224276	7.5	HIGH Network	haproxy	haproxy	A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if co…	CWE-444 HTTP Request Smuggling	CVE-2019-18277	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224277	6.1	MEDIUM Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection with…	CWE-79 Cross-site Scripting	CVE-2019-18219	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

224278	7.8	HIGH Local	nipper-ng_project	nipper-ng	A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Ex…	CWE-787 Out-of-bounds Write	CVE-2019-17424	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

224279	7.5	HIGH Network	universal_office_converter_project	universal_office_converter	The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-17400	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

224280	8.1	HIGH Network	libssh2 fedoraproject opensuse debian netapp	libssh2 fedora leap debian_linux element_software ontap_select_deploy_administration_utility solidfire hci_management_node active_iq_unified_manager bootstrap_os	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s…	CWE-190 Integer Overflow or Wraparound	CVE-2019-17498	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm