Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251541	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0115	2012-01-23 11:28	2012-01-17	Show	GitHub Exploit DB Packet Storm

251542	4.3	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0496	2012-01-23 11:06	2012-01-17	Show	GitHub Exploit DB Packet Storm

251543	4.9	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0118	2012-01-23 11:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

251544	4.9	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0116	2012-01-23 11:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

251545	5	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2262	2012-01-23 11:03	2012-01-17	Show	GitHub Exploit DB Packet Storm

251546	5.5	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0113	2012-01-23 11:03	2012-01-17	Show	GitHub Exploit DB Packet Storm

251547	2.1	注意	オラクル	-	Oracle Communications Unified における Calendar Server の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3570	2012-01-23 10:59	2012-01-17	Show	GitHub Exploit DB Packet Storm

251548	3.3	注意	オラクル	-	Oracle Communications Unified における Calendar Server の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3574	2012-01-23 10:58	2012-01-17	Show	GitHub Exploit DB Packet Storm

251549	4	警告	オラクル	-	Oracle Communications Unified における Calendar Server の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3573	2012-01-23 10:58	2012-01-17	Show	GitHub Exploit DB Packet Storm

251550	4.6	警告	オラクル	-	Oracle Communications Unified における Calendar Server の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3565	2012-01-23 10:56	2012-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223081	6.5	MEDIUM Network	rockcarry	ffjpeg	jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.	CWE-369 Divide By Zero	CVE-2019-19888	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223082	6.5	MEDIUM Network	rockcarry	ffjpeg	bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.	CWE-476 NULL Pointer Dereference	CVE-2019-19887	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223083	9.8	CRITICAL Network	djangoproject canonical	django ubuntu_linux	Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2019-19844	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223084	6.5	MEDIUM Network	tautulli	tautulli	In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous access can be achieved in applications that do not have a user login area).	CWE-352 Origin Validation Error	CVE-2019-19833	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223085	8.8	HIGH Network	xerox	altalink_c8035_firmware	Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. (The frmUserName value must have a unique name.)	CWE-352 Origin Validation Error	CVE-2019-19832	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223086	5.4	MEDIUM Network	solarwinds	serv-u_ftp_server	A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.	CWE-79 Cross-site Scripting	CVE-2019-19829	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223087	7.8	HIGH Local	shadow_project	shadow	shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affe…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19882	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223088	4.8	MEDIUM Network	dlink	dir-615_firmware	On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.	CWE-79 Cross-site Scripting	CVE-2019-19742	2024-11-21 13:35	2019-12-18	Show	GitHub Exploit DB Packet Storm

223089	7.5	HIGH Network	sqlite netapp debian suse redhat opensuse oracle siemens	sqlite cloud_backup debian_linux package_hub enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation leap backports_sle mysql_workbench sinec_infra…	exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.	CWE-476 NULL Pointer Dereference	CVE-2019-19880	2024-11-21 13:35	2019-12-18	Show	GitHub Exploit DB Packet Storm

223090	9.8	CRITICAL Network	joomla	joomla\!	In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.	CWE-89 SQL Injection	CVE-2019-19846	2024-11-21 13:35	2019-12-18	Show	GitHub Exploit DB Packet Storm