Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227081	6.5	警告	IBM	-	IBM InfoSphere Information Server における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0701	2013-02-1 16:09	2013-01-11	Show	GitHub Exploit DB Packet Storm

227082	1.9	注意	IBM	-	IBM InfoSphere Information Server におけるアクセス制限を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-0700	2013-02-1 16:07	2013-01-11	Show	GitHub Exploit DB Packet Storm

227083	6.5	警告	IBM	-	IBM InfoSphere Information Server におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0205	2013-02-1 16:06	2013-01-11	Show	GitHub Exploit DB Packet Storm

227084	9.3	危険	IBM	-	IBM InfoSphere Information Server における権限を取得される脆弱性	CWE-Other その他	CVE-2012-0204	2013-02-1 16:06	2013-01-11	Show	GitHub Exploit DB Packet Storm

227085	4.3	警告	IBM	-	IBM InfoSphere Information Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0203	2013-02-1 16:05	2013-01-11	Show	GitHub Exploit DB Packet Storm

227086	7.1	危険	Codeorigin	-	Sysax Multi Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-6530	2013-02-1 16:05	2013-01-31	Show	GitHub Exploit DB Packet Storm

227087	7.5	危険	Marinet	-	Marinet CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-6529	2013-02-1 16:04	2013-01-31	Show	GitHub Exploit DB Packet Storm

227088	4.3	警告	ATutor	-	ATutor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6528	2013-02-1 16:03	2012-10-5	Show	GitHub Exploit DB Packet Storm

227089	2.6	注意	Joedolson	-	WordPress 用 My Calendar プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6527	2013-02-1 16:02	2013-01-6	Show	GitHub Exploit DB Packet Storm

227090	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Freelance Zone の show_code.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-6526	2013-02-1 16:00	2013-01-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225311	7.5	HIGH Network	microsoft	azure_stack	A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.	CWE-290 Authentication Bypass by Spoofing	CVE-2019-1234	2024-11-21 13:36	2019-11-13	Show	GitHub Exploit DB Packet Storm

225312	7.8	HIGH Local	microsoft	windows_10_update_assistant	An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileg…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-1378	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225313	6.5	MEDIUM Network	microsoft	sql_server_management_studio	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulne…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-1376	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225314	5.4	MEDIUM Network	microsoft	dynamics_365	A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamic…	CWE-79 Cross-site Scripting	CVE-2019-1375	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225315	7.5	HIGH Network	microsoft	internet_explorer	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.	CWE-787 Out-of-bounds Write	CVE-2019-1371	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225316	10.0	CRITICAL Network	microsoft	azure_app_service_on_azure_stack	An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited…	NVD-CWE-noinfo	CVE-2019-1372	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225317	5.5	MEDIUM Local	microsoft	open_enclave_software_development_kit	An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information Disclosure Vulnerability'.	CWE-200 Information Exposure	CVE-2019-1369	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225318	4.6	MEDIUM Physics	microsoft	windows_10 windows_server_2016 windows_server_2019	A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'Windows Secure Boot Security Feature Bypass Vulnerability'.	NVD-CWE-noinfo	CVE-2019-1368	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225319	7.5	HIGH Network	microsoft	chakracore edge	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. Th…	CWE-787 Out-of-bounds Write	CVE-2019-1366	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

225320	9.9	CRITICAL Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability …	NVD-CWE-noinfo	CVE-2019-1365	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed