Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251971	2.6	注意	Acidcat	-	Acidcat CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0933	2012-02-1 11:01	2012-01-29	Show	GitHub Exploit DB Packet Storm

251972	5.8	警告	Lead Capture Page System	-	Lead Capture Page System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0932	2012-02-1 11:00	2012-01-29	Show	GitHub Exploit DB Packet Storm

251973	7.8	危険	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2012-0931	2012-02-1 10:08	2012-01-20	Show	GitHub Exploit DB Packet Storm

251974	4.3	警告	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0930	2012-02-1 10:05	2012-01-20	Show	GitHub Exploit DB Packet Storm

251975	7.8	危険	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0929	2012-02-1 10:04	2012-01-20	Show	GitHub Exploit DB Packet Storm

251976	7.2	危険	Linux	-	Linux kernel の hfs_mac2asc 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4330	2012-01-31 16:45	2011-11-14	Show	GitHub Exploit DB Packet Storm

251977	6.9	警告	Linux	-	Linux kernel の xfs_readlink 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4077	2012-01-31 16:19	2012-01-27	Show	GitHub Exploit DB Packet Storm

251978	2.1	注意	Linux	-	Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび OOPS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2203	2012-01-31 16:15	2012-01-27	Show	GitHub Exploit DB Packet Storm

251979	2.1	注意	Linux	-	Linux kernel の tpm_read 関数における TPM コマンドの結果を読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1162	2012-01-31 16:13	2012-01-27	Show	GitHub Exploit DB Packet Storm

251980	6.9	警告	Linux	-	Linux kernel の mem_write 関数における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0056	2012-01-31 11:27	2012-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224781	8.8	HIGH Network	openstack	keystone	OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enfor…	CWE-522 Insufficiently Protected Credentials	CVE-2019-19687	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224782	8.8	HIGH Network	nopcommerce	nopcommerce	RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions.	CWE-352 Origin Validation Error	CVE-2019-19685	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224783	8.8	HIGH Network	nopcommerce	nopcommerce	nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-19684	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224784	9.1	CRITICAL Network	nopcommerce	nopcommerce	RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFileman…	CWE-22 Path Traversal	CVE-2019-19683	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224785	4.8	MEDIUM Network	nopcommerce	nopcommerce	nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Controllers\NewsController.cs and \Presentation\Nop.Web\Areas\Admin\Controllers\BlogCo…	CWE-79 Cross-site Scripting	CVE-2019-19682	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224786	5.4	MEDIUM Network	xpand-it	xray_test_mangaement	In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action…	CWE-79 Cross-site Scripting	CVE-2019-19679	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224787	5.4	MEDIUM Network	xpand-it	xray_test_mangaement	In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test is…	CWE-79 Cross-site Scripting	CVE-2019-19678	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224788	5.5	MEDIUM Local	sqlite netapp oracle tenable siemens	sqlite cloud_backup ontap_select_deploy_administration_utility mysql_workbench tenable.sc sinec_infrastructure_network_services	alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.	CWE-674 Uncontrolled Recursion	CVE-2019-19645	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

224789	7.8	HIGH Local	virustotal fedoraproject	yara fedora	In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, re…	CWE-125 Out-of-bounds Read	CVE-2019-19648	2024-11-21 13:35	2019-12-9	Show	GitHub Exploit DB Packet Storm

224790	7.8	HIGH Local	radare fedoraproject	radare2 fedora	radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a…	CWE-476 NULL Pointer Dereference	CVE-2019-19647	2024-11-21 13:35	2019-12-9	Show	GitHub Exploit DB Packet Storm