Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251831 4.3 警告 EPiServer - EPiServer CMS の 管理インタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1034 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
251832 6 警告 EPiServer - EPiServer CMS における WebAdmins のアクセス権を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-1031 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
251833 5 警告 OfficeSIP Communications - OfficeSIP Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1008 2012-02-10 15:03 2012-02-8 Show GitHub Exploit DB Packet Storm
251834 2.1 注意 Foswiki - Foswiki の UI/Register.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1004 2012-02-10 15:02 2012-02-8 Show GitHub Exploit DB Packet Storm
251835 10 危険 Zakon Group - OpenConf における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1002 2012-02-10 15:01 2012-02-2 Show GitHub Exploit DB Packet Storm
251836 7.5 危険 Tube Ace - Tube Ace の mobile/search/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1029 2012-02-10 15:00 2012-02-8 Show GitHub Exploit DB Packet Storm
251837 4.3 警告 Simple Groupware Solutions - SimpleGroupware の bin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1028 2012-02-10 14:59 2012-02-2 Show GitHub Exploit DB Packet Storm
251838 7.5 危険 Johannes Ekberg - XRay CMS の login2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1026 2012-02-10 14:15 2012-02-8 Show GitHub Exploit DB Packet Storm
251839 5 警告 Dream Property GmbH - Enigma2 Webinterface のファイルにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1025 2012-02-10 14:01 2012-02-8 Show GitHub Exploit DB Packet Storm
251840 5 警告 Dream Property GmbH - Enigma2 Webinterface のファイルにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1024 2012-02-10 14:00 2012-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222221 7.1 HIGH
Local 		openbsd libressl LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print). CWE-125
Out-of-bounds Read 		CVE-2019-25048 2024-11-21 13:39 2021-07-1 Show GitHub Exploit DB Packet Storm
222222 6.1 MEDIUM
Network 		greenbone greenbone_security_assistant
greenbone_os 		Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad. CWE-79
Cross-site Scripting 		CVE-2019-25047 2024-11-21 13:39 2021-06-22 Show GitHub Exploit DB Packet Storm
222223 6.1 MEDIUM
Network 		cerberusftp ftp_server The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document. CWE-79
Cross-site Scripting 		CVE-2019-25046 2024-11-21 13:39 2021-06-10 Show GitHub Exploit DB Packet Storm
222224 7.8 HIGH
Local 		linux
netapp 		linux_kernel
solidfire_baseboard_management_controller_firmware
cloud_backup
solidfire_\&_hci_management_node
h500s_firmware
h700s_firmware
h300e_firmware
h500e_firmware
h… 		An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46. CWE-416
 Use After Free 		CVE-2019-25045 2024-11-21 13:39 2021-06-8 Show GitHub Exploit DB Packet Storm
222225 5.5 MEDIUM
Local 		versa-networks versa_director
versa_analytics
versa_operating_system 		In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-25030 2024-11-21 13:39 2021-05-27 Show GitHub Exploit DB Packet Storm
222226 9.8 CRITICAL
Network 		versa-networks versa_director In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are pos… CWE-77
Command Injection 		CVE-2019-25029 2024-11-21 13:39 2021-05-27 Show GitHub Exploit DB Packet Storm
222227 7.8 HIGH
Local 		linux
netapp 		linux_kernel
cloud_backup
solidfire_\&_hci_management_node
solidfire_baseboard_management_controller_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h… 		The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related… CWE-416
 Use After Free 		CVE-2019-25044 2024-11-21 13:39 2021-05-15 Show GitHub Exploit DB Packet Storm
222228 5.3 MEDIUM
Network 		trustwave modsecurity ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-25043 2024-11-21 13:39 2021-05-7 Show GitHub Exploit DB Packet Storm
222229 9.8 CRITICAL
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound … CWE-787
 Out-of-bounds Write 		CVE-2019-25042 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
222230 7.5 HIGH
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unboun… CWE-617
 Reachable Assertion 		CVE-2019-25041 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm