Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251741 5 警告 Google - Mac OS X 上で稼働する Google Chrome のサンドボックス実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-0776 2011-11-16 10:04 2011-02-3 Show GitHub Exploit DB Packet Storm
251742 10 危険 Google - Google Chrome および Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0484 2011-11-16 09:51 2011-01-12 Show GitHub Exploit DB Packet Storm
251743 10 危険 Google - Google Chrome および Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0483 2011-11-16 09:49 2011-01-12 Show GitHub Exploit DB Packet Storm
251744 9.3 危険 Google - Google Chrome および Chrome OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-0482 2011-11-16 09:49 2011-01-12 Show GitHub Exploit DB Packet Storm
251745 4.6 警告 マイクロソフト - Microsoft Windows Server 2008 および Windows 7 におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4434 2011-11-15 16:10 2011-11-11 Show GitHub Exploit DB Packet Storm
251746 7.2 危険 アップル - Apple iOS のカーネルにおける任意の符号なしコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3442 2011-11-15 16:09 2011-11-11 Show GitHub Exploit DB Packet Storm
251747 9.3 危険 アップル - Apple iOS の libinfo における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3441 2011-11-15 16:08 2011-11-11 Show GitHub Exploit DB Packet Storm
251748 1.2 注意 アップル - Apple iOS の Passcode Lock 機能におけるデータにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3440 2011-11-15 16:06 2011-11-11 Show GitHub Exploit DB Packet Storm
251749 4.4 警告 Apache Software Foundation - Apache Tomcat における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3376 2011-11-15 15:54 2011-11-8 Show GitHub Exploit DB Packet Storm
251750 5 警告 IBM - IBM DB2 Tools の web-server コンポーネントにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4435 2011-11-15 15:50 2011-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223651 5.4 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		In WordPress before 5.3.1, authenticated users with lower privileges (like contributors) can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admi… CWE-79
Cross-site Scripting 		CVE-2019-16781 2024-11-21 13:31 2019-12-27 Show GitHub Exploit DB Packet Storm
223652 8.2 HIGH
Network 		agendaless
oracle
debian
fedoraproject
redhat 		waitress
communications_cloud_native_core_network_function_cloud_native_environment
debian_linux
fedora
openstack 		In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress lead… CWE-444
HTTP Request Smuggling 		CVE-2019-16789 2024-11-21 13:31 2019-12-27 Show GitHub Exploit DB Packet Storm
223653 5.4 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress users with lower privileges (like contributors) can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an a… CWE-79
Cross-site Scripting 		CVE-2019-16780 2024-11-21 13:31 2019-12-27 Show GitHub Exploit DB Packet Storm
223654 7.5 HIGH
Network 		agendaless
oracle
debian
fedoraproject
redhat 		waitress
communications_cloud_native_core_network_function_cloud_native_environment
debian_linux
fedora
openstack 		Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header … CWE-444
HTTP Request Smuggling 		CVE-2019-16786 2024-11-21 13:31 2019-12-21 Show GitHub Exploit DB Packet Storm
223655 7.5 HIGH
Network 		agendaless
oracle
debian
fedoraproject
redhat 		waitress
communications_cloud_native_core_network_function_cloud_native_environment
debian_linux
fedora
openstack 		Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize… CWE-444
HTTP Request Smuggling 		CVE-2019-16785 2024-11-21 13:31 2019-12-21 Show GitHub Exploit DB Packet Storm
223656 9.8 CRITICAL
Network 		beckhoff twincat Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol. CWE-290
 Authentication Bypass by Spoofing 		CVE-2019-16871 2024-11-21 13:31 2019-12-20 Show GitHub Exploit DB Packet Storm
223657 5.9 MEDIUM
Network 		rack_project
fedoraproject
opensuse 		rack
fedora
leap 		There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack session… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-16782 2024-11-21 13:31 2019-12-19 Show GitHub Exploit DB Packet Storm
223658 9.8 CRITICAL
Network 		google tensorflow In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32. In this case data_size and num_segments fields are truncated from in… CWE-681
 Incorrect Conversion between Numeric Types 		CVE-2019-16778 2024-11-21 13:31 2019-12-17 Show GitHub Exploit DB Packet Storm
223659 5.9 MEDIUM
Network 		excon_project
opensuse
debian 		excon
leap
backports_sle
debian_linux 		In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent req… CWE-362
Race Condition 		CVE-2019-16779 2024-11-21 13:31 2019-12-17 Show GitHub Exploit DB Packet Storm
223660 9.8 CRITICAL
Network 		skymee
petwant 		petalk_ai_firmware
pf-103_firmware 		The processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user. CWE-78
OS Command  		CVE-2019-16737 2024-11-21 13:31 2019-12-14 Show GitHub Exploit DB Packet Storm