Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250481 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog PRO および Winlog Lite におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4037 2011-12-26 16:32 2011-12-22 Show GitHub Exploit DB Packet Storm
250482 5 警告 Moodle - Moodle の calendar/set.php における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4203 2011-12-26 16:32 2011-12-22 Show GitHub Exploit DB Packet Storm
250483 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4634 2011-12-26 16:31 2011-12-1 Show GitHub Exploit DB Packet Storm
250484 4.3 警告 The phpMyAdmin Project - phpMyAdmin の libraries/display_export.lib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4780 2011-12-26 16:30 2011-12-21 Show GitHub Exploit DB Packet Storm
250485 4.3 警告 The phpMyAdmin Project - phpMyAdmin の libraries/config/ConfigFile.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4782 2011-12-26 16:29 2011-12-21 Show GitHub Exploit DB Packet Storm
250486 6.5 警告 WordPress.org - WordPress において任意の PHP コードが実行可能な脆弱性 CWE-94
コード・インジェクション 		- 2011-12-26 14:27 2011-12-26 Show GitHub Exploit DB Packet Storm
250487 4.3 警告 WordPress.org - WordPress 日本語版におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2011-12-26 12:01 2011-12-26 Show GitHub Exploit DB Packet Storm
250488 4.3 警告 藤本 壱 - Movable Type 用メールフォームプラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6751 2011-12-26 12:00 2011-12-26 Show GitHub Exploit DB Packet Storm
250489 7.2 危険 FreeBSD - FreeBSD の カーネルにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4062 2011-12-26 10:43 2011-09-28 Show GitHub Exploit DB Packet Storm
250490 6.8 警告 Mozilla Foundation - Mac OS X 上で稼働する Mozilla Firefox および Thunderbird におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3666 2011-12-22 15:43 2011-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213711 5.4 MEDIUM
Network 		vertiv avocent_umg-4000_firmware The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before disp… CWE-79
Cross-site Scripting 		CVE-2019-9509 2024-11-21 13:51 2020-03-31 Show GitHub Exploit DB Packet Storm
213712 3.5 LOW
Network 		vertiv avocent_umg-4000_firmware The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file withi… CWE-79
Cross-site Scripting 		CVE-2019-9508 2024-11-21 13:51 2020-03-31 Show GitHub Exploit DB Packet Storm
213713 7.2 HIGH
Network 		vertiv avocent_umg-4000_firmware The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing. Since all commands w… CWE-77
Command Injection 		CVE-2019-9507 2024-11-21 13:51 2020-03-31 Show GitHub Exploit DB Packet Storm
213714 7.5 HIGH
Network 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i… CWE-125
Out-of-bounds Read 		CVE-2019-9474 2024-11-21 13:51 2020-03-16 Show GitHub Exploit DB Packet Storm
213715 7.5 HIGH
Network 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i… CWE-125
Out-of-bounds Read 		CVE-2019-9473 2024-11-21 13:51 2020-03-16 Show GitHub Exploit DB Packet Storm
213716 8.8 HIGH
Adjacent 		synology
broadcom 		router_manager
bcm4339_firmware 		The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. … CWE-787
 Out-of-bounds Write 		CVE-2019-9502 2024-11-21 13:51 2020-02-4 Show GitHub Exploit DB Packet Storm
213717 8.8 HIGH
Adjacent 		synology
broadcom 		router_manager
bcm4339_firmware 		The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_… CWE-787
 Out-of-bounds Write 		CVE-2019-9501 2024-11-21 13:51 2020-02-4 Show GitHub Exploit DB Packet Storm
213718 8.3 HIGH
Adjacent 		broadcom
redhat 		brcmfmac_driver
enterprise_linux 		The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a re… CWE-20
 Improper Input Validation  		CVE-2019-9503 2024-11-21 13:51 2020-01-17 Show GitHub Exploit DB Packet Storm
213719 8.3 HIGH
Adjacent 		broadcom
linux 		brcmfmac_driver
linux_kernel 		The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malic… CWE-787
 Out-of-bounds Write 		CVE-2019-9500 2024-11-21 13:51 2020-01-17 Show GitHub Exploit DB Packet Storm
213720 7.8 HIGH
Local 		microsoft windows_10
windows_server_2019 		A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with t… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-9510 2024-11-21 13:51 2020-01-16 Show GitHub Exploit DB Packet Storm