Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250411 6.9 警告 PlotSoft L.L.C. - PlotSoft PDFill PDF Editor における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-3690 2011-10-4 10:00 2011-09-27 Show GitHub Exploit DB Packet Storm
250412 7.5 危険 Sonexis Technology, Inc. - Sonexis ConferenceManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3688 2011-10-4 09:45 2011-09-27 Show GitHub Exploit DB Packet Storm
250413 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3687 2011-10-3 14:56 2011-09-27 Show GitHub Exploit DB Packet Storm
250414 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3686 2011-10-3 14:55 2011-09-27 Show GitHub Exploit DB Packet Storm
250415 1.9 注意 Tembria - Tembria Server Monitor における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3685 2011-10-3 14:54 2011-09-27 Show GitHub Exploit DB Packet Storm
250416 4.3 警告 Tembria - Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3684 2011-10-3 14:52 2011-09-27 Show GitHub Exploit DB Packet Storm
250417 7.5 危険 Newgen Software Technologies Limited - Newgen OmniDocs におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3645 2011-10-3 14:48 2011-09-27 Show GitHub Exploit DB Packet Storm
250418 7.5 危険 AliBabaClone.com - Alibaba Clone B2B の countrydetails.php におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4849 2011-09-30 14:24 2011-09-27 Show GitHub Exploit DB Packet Storm
250419 4.3 警告 Diferior - Diferior におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4850 2011-09-30 14:22 2011-09-27 Show GitHub Exploit DB Packet Storm
250420 7.5 危険 Eclime - Eclime における複数の SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4851 2011-09-30 14:19 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211711 7.8 HIGH
Local 		pdfalto_project
xpdfreader 		pdfalto
xpdf 		There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a c… CWE-125
Out-of-bounds Read 		CVE-2019-9878 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
211712 7.8 HIGH
Local 		xpdfreader xpdf There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2019-9877 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
211713 9.8 CRITICAL
Network 		oembed_project oembed plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements. CWE-19
 Data Processing Errors 		CVE-2019-9870 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
211714 7.2 HIGH
Network 		veritas netbackup_appliance An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator. CWE-522
 Insufficiently Protected Credentials 		CVE-2019-9868 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
211715 7.2 HIGH
Network 		veritas netbackup_appliance An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator. CWE-522
 Insufficiently Protected Credentials 		CVE-2019-9867 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
211716 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark()… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-9857 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
211717 6.1 MEDIUM
Network 		openid openid_connect Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that result… CWE-601
Open Redirect 		CVE-2019-9837 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
211718 9.6 CRITICAL
Adjacent 		fujitsu lx901_firmware
gk900_firmware 		The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legiti… NVD-CWE-noinfo
CVE-2019-9835 2024-11-21 13:52 2019-03-16 Show GitHub Exploit DB Packet Storm
211719 7.5 HIGH
Network 		screen_stream_project screen_stream The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop requests. NVD-CWE-noinfo
CVE-2019-9833 2024-11-21 13:52 2019-03-16 Show GitHub Exploit DB Packet Storm
211720 7.5 HIGH
Network 		airdrop_project airdrop The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that makes many socket connections through a configured port. NVD-CWE-noinfo
CVE-2019-9832 2024-11-21 13:52 2019-03-16 Show GitHub Exploit DB Packet Storm