Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226761 10 危険 Connections project - WordPress 用の Connections プラグインにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-5254 2013-01-16 15:25 2011-06-15 Show GitHub Exploit DB Packet Storm
226762 4.3 警告 thregr.org - Dl Download Ticket Service における任意のユーザでログインされる脆弱性 CWE-287
不適切な認証 		CVE-2011-5253 2013-01-16 15:16 2011-12-31 Show GitHub Exploit DB Packet Storm
226763 9.3 危険 マイクロソフト - Microsoft .NET Framework の Windows Forms コンポーネントにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0002 2013-01-16 15:01 2013-01-8 Show GitHub Exploit DB Packet Storm
226764 9.3 危険 マイクロソフト - Microsoft .NET Framework の S.DS.P 名前空間メソッドにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0003 2013-01-16 15:01 2013-01-8 Show GitHub Exploit DB Packet Storm
226765 7.8 危険 マイクロソフト - Microsoft .NET Framework および Windows Server 2012 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0005 2013-01-16 14:59 2013-01-8 Show GitHub Exploit DB Packet Storm
226766 3.5 注意 OpenStack - OpenStack Keystone における承認の制限を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-5571 2013-01-16 14:44 2012-11-28 Show GitHub Exploit DB Packet Storm
226767 5.8 警告 Orchard Project - Orchard の Users/Account/LogOff におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5252 2013-01-16 14:31 2011-12-21 Show GitHub Exploit DB Packet Storm
226768 4.3 警告 レッドハット - JBoss Application Server 用 IronJacamar コンテナにおけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-3428 2013-01-15 17:56 2012-08-2 Show GitHub Exploit DB Packet Storm
226769 2.1 注意 オラクル - Oracle Mojarra におけるコンテキスト情報を取得される脆弱性 CWE-DesignError
CVE-2012-2672 2013-01-15 17:54 2012-06-17 Show GitHub Exploit DB Packet Storm
226770 10 危険 Apache Software Foundation - Apache CXF における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2379 2013-01-15 17:53 2012-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224491 7.8 HIGH
Local 		gemalto sentinel_ldk_license_manager SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker wi… CWE-59
Link Following 		CVE-2019-18232 2024-11-21 13:32 2019-12-12 Show GitHub Exploit DB Packet Storm
224492 9.8 CRITICAL
Network 		yachtcontrol yachtcontrol Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command={COMMAND}" page and parameter, where {COMM… CWE-78
OS Command  		CVE-2019-17270 2024-11-21 13:32 2019-12-11 Show GitHub Exploit DB Packet Storm
224493 9.8 CRITICAL
Network 		trendmicro antivirus\+_security_2020
internet_security_2020
maximum_security_2020
premium_security_2020 		Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsig… CWE-476
 NULL Pointer Dereference 		CVE-2019-18190 2024-11-21 13:32 2019-12-10 Show GitHub Exploit DB Packet Storm
224494 7.8 HIGH
Local 		aviatrix vpn_client Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges thr… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-17388 2024-11-21 13:32 2019-12-6 Show GitHub Exploit DB Packet Storm
224495 7.8 HIGH
Local 		aviatrix vpn_client An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS. NVD-CWE-noinfo
CVE-2019-17387 2024-11-21 13:32 2019-12-6 Show GitHub Exploit DB Packet Storm
224496 7.5 HIGH
Network 		otrs otrs Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Community Edition and OTRS allows an remote at… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-18180 2024-11-21 13:32 2019-12-6 Show GitHub Exploit DB Packet Storm
224497 7.8 HIGH
Local 		paloaltonetworks pan-os An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects P… CWE-287
Improper Authentication 		CVE-2019-17437 2024-11-21 13:32 2019-12-6 Show GitHub Exploit DB Packet Storm
224498 7.5 HIGH
Network 		apache olingo The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it to the Thread.sleep() method without any check. If a malicious server returns a … CWE-20
 Improper Input Validation  		CVE-2019-17555 2024-11-21 13:32 2019-12-5 Show GitHub Exploit DB Packet Storm
224499 9.8 CRITICAL
Network 		apache olingo Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserialized. If an attacker can feed malicious me… CWE-502
 Deserialization of Untrusted Data 		CVE-2019-17556 2024-11-21 13:32 2019-12-5 Show GitHub Exploit DB Packet Storm
224500 5.5 MEDIUM
Local 		apache olingo The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with content type "application/xml", which tri… CWE-611
XXE 		CVE-2019-17554 2024-11-21 13:32 2019-12-5 Show GitHub Exploit DB Packet Storm