Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230301	2.1	注意	VMware Linux	-	Linux kernel におけるサービス運用妨害 (アサーションエラーおよび kernel oops) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-4132	2012-12-17 16:08	2012-01-27	Show	GitHub Exploit DB Packet Storm

230302	2.1	注意	VMware Linux	-	Linux kernel の proc ファイルシステム実装における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1020	2012-12-17 16:06	2011-02-28	Show	GitHub Exploit DB Packet Storm

230303	2.1	注意	VMware Linux	-	Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび kernel oops) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4110	2012-12-17 16:02	2012-01-27	Show	GitHub Exploit DB Packet Storm

230304	5.4	警告	VMware Linux	-	Linux Kernel の setup_cifs_sb 関数におけるサービス運用妨害 (システムクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3363	2012-12-17 16:00	2012-05-24	Show	GitHub Exploit DB Packet Storm

230305	4.9	警告	VMware Linux	-	x86 プラットフォーム上の Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2011-3209	2012-12-17 15:59	2008-07-13	Show	GitHub Exploit DB Packet Storm

230306	7.8	危険	VMware Linux	-	Linux Kernel の IPv4 と IPv6 の実装におけるサービス運用妨害 (ネットワーク障害) の脆弱性	CWE-DesignError	CVE-2011-3188	2012-12-17 15:57	2012-05-24	Show	GitHub Exploit DB Packet Storm

230307	4.3	警告	VideoLAN	-	VideoLAN VLC media player の libpng_plugin におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-119 バッファエラー	CVE-2012-5470	2012-12-17 13:47	2012-10-26	Show	GitHub Exploit DB Packet Storm

230308	2.1	注意	シトリックス・システムズ	-	Xen におけるサービス運用妨害 (無限ループおよびハングアップまたはクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4539	2012-12-17 13:43	2012-11-13	Show	GitHub Exploit DB Packet Storm

230309	4.9	警告	シトリックス・システムズ	-	Xen の HVMOP_pagetable_dying ハイパーコールにおけるサービス運用妨害 (ハイパーバイザクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4538	2012-12-17 13:41	2012-11-13	Show	GitHub Exploit DB Packet Storm

230310	2.1	注意	シトリックス・システムズ	-	Xen におけるサービス運用妨害 (メモリ消費および表明違反) の脆弱性	CWE-16 環境設定	CVE-2012-4537	2012-12-17 12:30	2012-11-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211951	5.3	MEDIUM Network	wpengine	wpgraphql	The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.	CWE-306 Missing Authentication for Critical Function	CVE-2019-9881	2024-11-21 13:52	2019-06-11	Show	GitHub Exploit DB Packet Storm

211952	9.1	CRITICAL Network	wpengine	wpgraphql	An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such a…	CWE-306 Missing Authentication for Critical Function	CVE-2019-9880	2024-11-21 13:52	2019-06-11	Show	GitHub Exploit DB Packet Storm

211953	9.8	CRITICAL Network	wpengine	wpgraphql	The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutatio…	CWE-306 Missing Authentication for Critical Function	CVE-2019-9879	2024-11-21 13:52	2019-06-11	Show	GitHub Exploit DB Packet Storm

211954	8.8	HIGH Network	northern	cfengine	Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2019-9929	2024-11-21 13:52	2019-06-7	Show	GitHub Exploit DB Packet Storm

211955	9.8	CRITICAL Network	pydio	pydio	An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by placing it on the fourth line of a .php fi…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2019-9642	2024-11-21 13:52	2019-06-6	Show	GitHub Exploit DB Packet Storm

211956	8.8	HIGH Local	synaptics	sound_device	Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an un…	NVD-CWE-noinfo	CVE-2019-9730	2024-11-21 13:52	2019-06-6	Show	GitHub Exploit DB Packet Storm

211957	8.8	HIGH Network	freenetproject	freenet	Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI.	CWE-19 Data Processing Errors	CVE-2019-9673	2024-11-21 13:52	2019-06-6	Show	GitHub Exploit DB Packet Storm

211958	6.1	MEDIUM Network	gilacms	gila_cms	Gila CMS 1.9.1 has XSS.	CWE-79 Cross-site Scripting	CVE-2019-9647	2024-11-21 13:52	2019-06-6	Show	GitHub Exploit DB Packet Storm

211959	7.0	HIGH Local	tuxera redhat	ntfs-3g enterprise_linux_server enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus	An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to …	CWE-787 CWE-191 Out-of-bounds Write Integer Underflow (Wrap or Wraparound)	CVE-2019-9755	2024-11-21 13:52	2019-06-6	Show	GitHub Exploit DB Packet Storm

211960	6.1	MEDIUM Network	vfront	vfront	VFront 0.99.5 has Reflected XSS via the admin/menu_registri.php descrizione_g parameter or the admin/sync_reg_tab.php azzera parameter.	CWE-79 Cross-site Scripting	CVE-2019-9839	2024-11-21 13:52	2019-06-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed