Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251701	4.3	警告	Apache Software Foundation	-	Apache Struts におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1006	2012-02-8 16:34	2012-02-7	Show	GitHub Exploit DB Packet Storm

251702	10	危険	シマンテック	-	Symantec pcAnywhere 製品におけるクライアントへアクセスされる脆弱性	CWE-noinfo 情報不足	CVE-2012-0290	2012-02-8 16:33	2012-01-24	Show	GitHub Exploit DB Packet Storm

251703	7.1	危険	IBM	-	IBM AIX の TCP 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-0194	2012-02-8 16:28	2012-02-3	Show	GitHub Exploit DB Packet Storm

251704	10	危険	Broadwin	-	Advantech/BroadWin WebAccess の webvrpcs.exe における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4041	2012-02-8 16:27	2012-02-6	Show	GitHub Exploit DB Packet Storm

251705	5	警告	Opera Software ASA	-	Opera における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-1003	2012-02-8 16:18	2012-02-7	Show	GitHub Exploit DB Packet Storm

251706	4	警告	DELL EMC (旧 EMC Corporation)	-	EMC Documentum xPlore におけるオブジェクトの存在を特定される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0396	2012-02-8 16:15	2012-02-6	Show	GitHub Exploit DB Packet Storm

251707	8.5	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおける任意のメモリロケーションからデータを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2011-4879	2012-02-8 11:12	2012-01-24	Show	GitHub Exploit DB Packet Storm

251708	7.8	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4878	2012-02-8 11:11	2012-01-24	Show	GitHub Exploit DB Packet Storm

251709	7.1	危険	シーメンス	-	複数の Siemens 製品の HmiLoad におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-4877	2012-02-8 11:09	2012-01-24	Show	GitHub Exploit DB Packet Storm

251710	9.3	危険	シーメンス	-	複数の Siemens 製品の HmiLoad におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4876	2012-02-8 11:07	2012-01-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222371	6.5	MEDIUM Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-20012	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222372	8.8	HIGH Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.	CWE-125 Out-of-bounds Read	CVE-2019-20011	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222373	8.8	HIGH Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c.	CWE-416 Use After Free	CVE-2019-20010	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222374	6.5	MEDIUM Network	gnu opensuse	libredwg leap backports_sle	An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-20009	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222375	5.4	MEDIUM Network	archerysec	archery	In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.	CWE-79 Cross-site Scripting	CVE-2019-20008	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222376	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer …	CWE-476 NULL Pointer Dereference	CVE-2019-20007	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222377	7.5	HIGH Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), lea…	CWE-416 Use After Free	CVE-2019-20006	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222378	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while r…	CWE-125 Out-of-bounds Read	CVE-2019-20005	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

222379	5.9	MEDIUM Network	bullguard	premium_protection	The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted.	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-20000	2024-11-21 13:37	2019-12-26	Show	GitHub Exploit DB Packet Storm

222380	5.3	MEDIUM Network	cisco	firepower_management_center firepower_threat_defense firepower_services_software_for_asa	A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could all…	CWE-276 Incorrect Default Permissions	CVE-2019-1982	2024-11-21 13:37	2019-11-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed