Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252021 4.3 警告 マイクロソフト - Microsoft Internet Explorer の CSS 実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2002-2435 2011-12-12 16:11 2011-12-7 Show GitHub Exploit DB Packet Storm
252022 6.8 警告 レッドハット - FreeIPA におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3636 2011-12-12 11:42 2011-12-8 Show GitHub Exploit DB Packet Storm
252023 4.3 警告 Vtiger - vtiger CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4680 2011-12-12 11:39 2011-12-7 Show GitHub Exploit DB Packet Storm
252024 4 警告 Vtiger - vtiger CRM におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4679 2011-12-12 11:39 2011-12-7 Show GitHub Exploit DB Packet Storm
252025 5 警告 Novell - Novell Messenger および Novell GroupWise Messenger における任意のメモリ配置を読み取られる脆弱性 CWE-200
情報漏えい 		CVE-2011-3179 2011-12-12 11:37 2011-10-25 Show GitHub Exploit DB Packet Storm
252026 10 危険 Novell - Novell ZENworks Asset Management の rtrlet コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2653 2011-12-12 11:36 2011-11-2 Show GitHub Exploit DB Packet Storm
252027 7.8 危険 日立 - JP1/Cm2/Network Node Manager i におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2011-12-9 16:35 2011-10-12 Show GitHub Exploit DB Packet Storm
252028 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (CPU およびメモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4687 2011-12-9 16:07 2011-12-7 Show GitHub Exploit DB Packet Storm
252029 5 警告 Opera Software ASA - Opera の Web Workers 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-4686 2011-12-9 16:06 2011-12-7 Show GitHub Exploit DB Packet Storm
252030 5 警告 Opera Software ASA - Opera の Dragonfly におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4685 2011-12-9 16:05 2011-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224231 7.2 HIGH
Network 		metinfo metinfo An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997. CWE-89
SQL Injection 		CVE-2019-17418 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224232 4.8 MEDIUM
Network 		pbootcms pbootcms PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs. CWE-79
Cross-site Scripting 		CVE-2019-17417 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224233 9.8 CRITICAL
Network 		upredsun file_sharing_wizard A Structured Exception Handler (SEH) based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a simil… CWE-120
Classic Buffer Overflow 		CVE-2019-17415 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224234 7.5 HIGH
Network 		vino_project vino tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL. NVD-CWE-noinfo
CVE-2019-17414 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224235 8.8 HIGH
Network 		citrix application_delivery_management Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-17366 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224236 7.8 HIGH
Local 		nixos nix Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable. CWE-276
Incorrect Default Permissions  		CVE-2019-17365 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224237 6.5 MEDIUM
Network 		exiv2
debian
canonical 		exiv2
debian_linux
ubuntu_linux 		Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of … CWE-120
Classic Buffer Overflow 		CVE-2019-17402 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224238 3.3 LOW
Local 		liblnk_project liblnk libyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code block of liblnk_location_information_read_data in liblnk_location_information.c, a different issue th… CWE-125
Out-of-bounds Read 		CVE-2019-17401 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224239 9.8 CRITICAL
Network 		joomlashack shack_forms_pro The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment. CWE-22
Path Traversal 		CVE-2019-17399 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm
224240 7.5 HIGH
Network 		riot-os riot In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. This allows an attacker (via a large packet) to prev… NVD-CWE-noinfo
CVE-2019-17389 2024-11-21 13:32 2019-10-10 Show GitHub Exploit DB Packet Storm