Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252001 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1879 2011-07-22 10:44 2011-07-12 Show GitHub Exploit DB Packet Storm
252002 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1878 2011-07-21 10:30 2011-07-12 Show GitHub Exploit DB Packet Storm
252003 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1877 2011-07-21 10:29 2011-07-12 Show GitHub Exploit DB Packet Storm
252004 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1876 2011-07-21 10:28 2011-07-12 Show GitHub Exploit DB Packet Storm
252005 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1875 2011-07-21 10:28 2011-07-12 Show GitHub Exploit DB Packet Storm
252006 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1874 2011-07-21 10:27 2011-07-12 Show GitHub Exploit DB Packet Storm
252007 10 危険 マイクロソフト - Microsoft Windows Vista および Windows 7 の Bluetooth Stack における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2011-1265 2011-07-21 10:24 2011-07-12 Show GitHub Exploit DB Packet Storm
252008 5 警告 Google - Google Chrome の Cascading Style Sheets の実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1810 2011-07-21 10:23 2011-06-7 Show GitHub Exploit DB Packet Storm
252009 5 警告 Google - Google Chrome のアクセシビリティ機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1809 2011-07-21 10:22 2011-06-7 Show GitHub Exploit DB Packet Storm
252010 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1808 2011-07-21 10:21 2011-06-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223751 9.8 CRITICAL
Network
artica integria_ims filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-15091 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223752 4.8 MEDIUM
Network
wso2 api_manager An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component. CWE-79
Cross-site Scripting
CVE-2019-15108 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223753 9.8 CRITICAL
Network
webmin webmin An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability. CWE-78
OS Command 
CVE-2019-15107 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223754 9.8 CRITICAL
Network
zohocorp manageengine_opmanager An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for… CWE-306
Missing Authentication for Critical Function
CVE-2019-15106 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223755 8.8 HIGH
Network
zohocorp manageengine_applications_manager An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a l… CWE-89
SQL Injection
CVE-2019-15105 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223756 8.8 HIGH
Network
zohocorp manageengine_applications_manager An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-author… CWE-89
SQL Injection
CVE-2019-15104 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223757 7.5 HIGH
Network
linux
canonical
linux_kernel
ubuntu_linux
drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CWE-476
 NULL Pointer Dereference
CVE-2019-15099 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223758 4.6 MEDIUM
Physics
linux
canonical
opensuse
netapp
debian
linux_kernel
ubuntu_linux
leap
element_software
active_iq_performance_analytics_services
active_iq_unified_manager
data_availability_services
debian_linux
drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CWE-476
 NULL Pointer Dereference
CVE-2019-15098 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223759 6.1 MEDIUM
Network
diaowen dwsurvey DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter. CWE-79
Cross-site Scripting
CVE-2019-15095 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223760 6.7 MEDIUM
Local
linux
canonical
opensuse
linux_kernel
ubuntu_linux
leap
An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read. CWE-125
Out-of-bounds Read
CVE-2019-15090 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm