Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250671	7.5	危険	bloofox	-	BloofoxCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4870	2012-01-19 10:25	2011-10-7	Show	GitHub Exploit DB Packet Storm

250672	10	危険	アドビシステムズ	-	Adobe Reader および Acrobat の PRC コンポーネントにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4369	2012-01-17 18:13	2011-12-16	Show	GitHub Exploit DB Packet Storm

250673	4.3	警告	CourseForum Technologies	-	ProjectForum におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4277	2012-01-17 17:44	2011-10-3	Show	GitHub Exploit DB Packet Storm

250674	2.1	注意	IBM	-	IBM WebSphere Application Server の Default Messaging コンポーネントにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-5066	2012-01-17 16:42	2011-04-11	Show	GitHub Exploit DB Packet Storm

250675	4.3	警告	IBM	-	IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5065	2012-01-17 16:41	2011-10-11	Show	GitHub Exploit DB Packet Storm

250676	7.5	危険	WHMCS Limited	-	WHMCompleteSolution の functions.php における任意のコード実行を誘発される脆弱性	CWE-94 コード・インジェクション	CVE-2011-5061	2012-01-17 16:40	2012-01-11	Show	GitHub Exploit DB Packet Storm

250677	7.1	危険	ISC, Inc.	-	ISC DHCP の dhcpd のロギング機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4868	2012-01-17 16:39	2012-01-12	Show	GitHub Exploit DB Packet Storm

250678	2.1	注意	Roderich Schupp	-	Perl 用 PAR モジュールの par_mktmpdir 関数におけるファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5060	2012-01-17 16:33	2012-01-13	Show	GitHub Exploit DB Packet Storm

250679	3.3	注意	Roderich Schupp	-	Perl 用 PAR::Packer モジュールの par_mktmpdir 関数におけるファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4114	2012-01-17 16:32	2012-01-13	Show	GitHub Exploit DB Packet Storm

250680	4.4	警告	Super	-	Super の super.c のエラー関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2776	2012-01-17 16:31	2012-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214111	6.1	MEDIUM Network	vestacp	control_panel	Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2019-9841	2024-11-21 13:52	2019-04-20	Show	GitHub Exploit DB Packet Storm

214112	6.1	MEDIUM Network	zyxel	atp200_firmware atp500_firmware atp800_firmware usg20-vpn_firmware usg20w-vpn_firmware usg40_firmware usg40w_firmware usg60_firmware usg60w_firmware usg110_firmware usg2…	On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security …	CWE-79 Cross-site Scripting	CVE-2019-9955	2024-11-21 13:52	2019-04-23	Show	GitHub Exploit DB Packet Storm

214113	9.1	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.	NVD-CWE-noinfo	CVE-2019-9890	2024-11-21 13:52	2019-04-18	Show	GitHub Exploit DB Packet Storm

214114	9.8	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2019-9756	2024-11-21 13:52	2019-04-18	Show	GitHub Exploit DB Packet Storm

214115	9.8	CRITICAL Network	miniblog.core_project	miniblog.core	madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs wr…	CWE-20 Improper Input Validation	CVE-2019-9845	2024-11-21 13:52	2019-04-17	Show	GitHub Exploit DB Packet Storm

214116	7.5	HIGH Network	xmltooling_project canonical opensuse	xmltooling ubuntu_linux leap	The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an …	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-9628	2024-11-21 13:52	2019-04-12	Show	GitHub Exploit DB Packet Storm

214117	8.8	HIGH Network	dasannetworks	h660rm_firmware	The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web inter…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2019-9976	2024-11-21 13:52	2019-04-12	Show	GitHub Exploit DB Packet Storm

214118	7.5	HIGH Network	dasannetworks	h660rm_firmware	DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data stored using this key can be decrypted by anyone able to access this key.	CWE-798 Use of Hard-coded Credentials	CVE-2019-9975	2024-11-21 13:52	2019-04-12	Show	GitHub Exploit DB Packet Storm

214119	9.1	CRITICAL Network	dasannetworks	h660rm_firmware	diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or cra…	CWE-306 CWE-862 Missing Authentication for Critical Function Missing Authorization	CVE-2019-9974	2024-11-21 13:52	2019-04-12	Show	GitHub Exploit DB Packet Storm

214120	9.8	CRITICAL Network	jfrog	artifactory	An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifacto…	NVD-CWE-noinfo	CVE-2019-9733	2024-11-21 13:52	2019-04-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed