Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230161	7.5	危険	streamripper	-	Streamripper の HTTP ヘッダ解析におけるバッファオーバーフローの脆弱性	-	CVE-2006-3124	2012-12-20 18:02	2006-08-26	Show	GitHub Exploit DB Packet Storm

230162	7.5	危険	brian wotring	-	Brian Wotring Osiris におけるフォーマットストリングの脆弱性	-	CVE-2006-3120	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

230163	5.1	警告	fbi	-	fbi の fbgs framebuffer Postscript/PDF viewer におけるフィルタを回避される脆弱性	-	CVE-2006-3119	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230164	5	警告	VMware	-	VMware ESX Server における権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2006-2481	2012-12-20 18:02	2006-07-26	Show	GitHub Exploit DB Packet Storm

230165	7.5	危険	LibVNC	-	LibVNCServer の auth.c における認証を回避される脆弱性	-	CVE-2006-2450	2012-12-20 18:02	2006-07-18	Show	GitHub Exploit DB Packet Storm

230166	5	警告	tamarack consulting	-	Tamarack MMSd におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-1178	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

230167	4	警告	merak IceWarp, Inc. deerfield	-	MERAK Mail Server および VisNetic MailServer における絶対パスディレクトリトラバーサルの脆弱性	-	CVE-2006-0818	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

230168	5	警告	merak IceWarp, Inc. deerfield	-	MERAK Mail Server および VisNetic MailServer における絶対パスディレクトリトラバーサルの脆弱性	-	CVE-2006-0817	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

230169	6.1	警告	Huawei	-	Huawei E585 デバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2012-5970	2012-12-20 15:58	2012-12-3	Show	GitHub Exploit DB Packet Storm

230170	4.8	警告	Huawei	-	Huawei E585 デバイスにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-5969	2012-12-20 15:55	2012-11-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212511	10.0	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows SSRF.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-9174	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212512	5.9	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 2 of 5).	NVD-CWE-noinfo	CVE-2019-9172	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212513	3.7	LOW Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 1 of 5).	CWE-862 Missing Authorization	CVE-2019-9171	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212514	5.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2019-9170	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212515	8.1	HIGH Network	w1.fi fedoraproject opensuse debian synology freebsd	hostapd wpa_supplicant fedora leap backports_sle debian_linux router_manager radius_server freebsd	The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-p…	CWE-287 Improper Authentication	CVE-2019-9499	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

212516	8.1	HIGH Network	w1.fi fedoraproject opensuse debian synology freebsd	hostapd wpa_supplicant fedora leap backports_sle debian_linux router_manager radius_server freebsd	The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Co…	CWE-287 Improper Authentication	CVE-2019-9498	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

212517	8.1	HIGH Network	w1.fi fedoraproject	hostapd wpa_supplicant fedora	The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete …	CWE-287 Improper Authentication	CVE-2019-9497	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

212518	7.5	HIGH Network	w1.fi fedoraproject	hostapd wpa_supplicant fedora	An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode. All version o…	CWE-287 Improper Authentication	CVE-2019-9496	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

212519	3.7	LOW Network	w1.fi fedoraproject opensuse debian synology freebsd	hostapd wpa_supplicant fedora leap backports_sle debian_linux radius_server router_manager freebsd	The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD suppo…	CWE-203 Information Exposure Through Discrepancy	CVE-2019-9495	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

212520	5.9	MEDIUM Network	w1.fi fedoraproject opensuse synology freebsd	hostapd wpa_supplicant fedora leap backports_sle radius_server router_manager freebsd	The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain…	CWE-203 Information Exposure Through Discrepancy	CVE-2019-9494	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed