Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250251 6.8 警告 アップル - Apple Mac OS X の Apple Type Services (ATS) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0229 2011-10-25 11:43 2011-10-14 Show GitHub Exploit DB Packet Storm
250252 6.8 警告 アップル - Apple Mac OS X の CoreMedia における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0224 2011-10-25 11:30 2011-10-14 Show GitHub Exploit DB Packet Storm
250253 9 危険 D-Link Systems, Inc. - D-Link DCS-2121 カメラの /etc/rc.d/rc.local におけるシェルアクセスを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-4965 2011-10-24 16:58 2011-10-16 Show GitHub Exploit DB Packet Storm
250254 9 危険 D-Link Systems, Inc. - D-Link DCS-2121 カメラの recorder_test.cgi における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4964 2011-10-24 16:58 2011-10-16 Show GitHub Exploit DB Packet Storm
250255 2.1 注意 アップル - Apple iOS の設定コンポーネントにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-3429 2011-10-24 16:50 2011-10-14 Show GitHub Exploit DB Packet Storm
250256 9.3 危険 アップル - Apple iOS の設定コンポーネントにおける詳細不明な影響を受ける脆弱性 CWE-Other
その他 		CVE-2011-3430 2011-10-24 16:48 2011-10-14 Show GitHub Exploit DB Packet Storm
250257 2.1 注意 アップル - Apple iOS のホームスクリーンコンポーネントにおける重要な状態情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3431 2011-10-24 16:47 2011-10-14 Show GitHub Exploit DB Packet Storm
250258 5 警告 アップル - Apple iOS の UIKit アラートコンポーネントにおけるサービス運用妨害 (デバイスハング) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3432 2011-10-24 16:46 2011-10-14 Show GitHub Exploit DB Packet Storm
250259 4.3 警告 アップル - Apple iOS の WiFi コンポーネントにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-3434 2011-10-24 16:46 2011-10-14 Show GitHub Exploit DB Packet Storm
250260 4.3 警告 アップル - Apple iOS および Safari で使用される WebKit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3243 2011-10-24 16:43 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211681 9.8 CRITICAL
Network 		miniblog.core_project miniblog.core madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs wr… CWE-20
 Improper Input Validation  		CVE-2019-9845 2024-11-21 13:52 2019-04-17 Show GitHub Exploit DB Packet Storm
211682 7.5 HIGH
Network 		xmltooling_project
canonical
opensuse 		xmltooling
ubuntu_linux
leap 		The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-9628 2024-11-21 13:52 2019-04-12 Show GitHub Exploit DB Packet Storm
211683 8.8 HIGH
Network 		dasannetworks h660rm_firmware The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web inter… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-9976 2024-11-21 13:52 2019-04-12 Show GitHub Exploit DB Packet Storm
211684 7.5 HIGH
Network 		dasannetworks h660rm_firmware DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data stored using this key can be decrypted by anyone able to access this key. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-9975 2024-11-21 13:52 2019-04-12 Show GitHub Exploit DB Packet Storm
211685 9.1 CRITICAL
Network 		dasannetworks h660rm_firmware diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or cra… CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2019-9974 2024-11-21 13:52 2019-04-12 Show GitHub Exploit DB Packet Storm
211686 9.8 CRITICAL
Network 		jfrog artifactory An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifacto… NVD-CWE-noinfo
CVE-2019-9733 2024-11-21 13:52 2019-04-12 Show GitHub Exploit DB Packet Storm
211687 7.8 HIGH
Local 		symantec endpoint_encryption Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software ap… NVD-CWE-noinfo
CVE-2019-9694 2024-11-21 13:52 2019-04-11 Show GitHub Exploit DB Packet Storm
211688 6.1 MEDIUM
Network 		symantec vip_enterprise_gateway Symantec VIP Enterprise Gateway (all versions) may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pa… CWE-79
Cross-site Scripting 		CVE-2019-9696 2024-11-21 13:52 2019-04-10 Show GitHub Exploit DB Packet Storm
211689 6.1 MEDIUM
Network 		khanacademy
fedoraproject 		simple-markdown
fedora 		simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI. CWE-79
Cross-site Scripting 		CVE-2019-9844 2024-11-21 13:52 2019-04-9 Show GitHub Exploit DB Packet Storm
211690 7.5 HIGH
Network 		kubernetes
cncf
netapp 		kubernetes
portmap
cloud_insights 		Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts… CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2019-9946 2024-11-21 13:52 2019-04-3 Show GitHub Exploit DB Packet Storm