Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252101	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンの Ogg reader におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2992	2011-09-5 10:53	2011-08-16	Show	GitHub Exploit DB Packet Storm

252102	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2991	2011-09-5 10:51	2011-08-16	Show	GitHub Exploit DB Packet Storm

252103	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2989	2011-09-5 10:39	2011-08-16	Show	GitHub Exploit DB Packet Storm

252104	6.9	警告	サイバートラスト株式会社シトリックス・システムズレッドハット	-	Xen の tools/libxc/xc_dom_bzimageloader.c における複数の整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1583	2011-09-2 14:27	2011-05-9	Show	GitHub Exploit DB Packet Storm

252105	7.8	危険	ISC, Inc. レッドハット	-	ISC DHCP サーバにおけるサービス運用妨害 (dhcp デーモンの停止) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2749	2011-09-2 14:26	2011-07-27	Show	GitHub Exploit DB Packet Storm

252106	6.8	警告	GTK+	-	GTK+ における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2010-4831	2011-09-2 12:04	2011-09-2	Show	GitHub Exploit DB Packet Storm

252107	4.3	警告	ジュニパーネットワークス	-	Juniper Networks IDP ACM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5086	2011-09-2 12:03	2011-09-2	Show	GitHub Exploit DB Packet Storm

252108	5.8	警告	Sage	-	Sage において任意のスクリプトが実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4102	2011-09-2 12:03	2011-09-2	Show	GitHub Exploit DB Packet Storm

252109	5.8	警告	Sage	-	Sage において任意のスクリプトが実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3384	2011-09-2 12:03	2011-09-2	Show	GitHub Exploit DB Packet Storm

252110	2.6	注意	Phorum	-	Phorum における複数の脆弱性	CWE-352 CWE-79	CVE-2011-3381 CVE-2011-3382	2011-09-2 12:00	2011-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222491	5.5	MEDIUM Local	ge	ifix	HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-18243	2024-11-21 13:32	2021-02-19	Show	GitHub Exploit DB Packet Storm

222492	5.5	MEDIUM Local	ge	ifix	HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-18255	2024-11-21 13:32	2021-02-19	Show	GitHub Exploit DB Packet Storm

222493	9.8	CRITICAL Network	libzip	libzip	A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive. NOTE: the discoverer s…	CWE-416 Use After Free	CVE-2019-17582	2024-11-21 13:32	2021-02-10	Show	GitHub Exploit DB Packet Storm

222494	7.5	HIGH Network	apache oracle	batik api_gateway hyperion_financial_reporting enterprise_repository business_intelligence retail_order_broker hospitality_opera_5 communications_application_session_controller	Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vu…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-17566	2024-11-21 13:32	2020-11-13	Show	GitHub Exploit DB Packet Storm

222495	9.8	CRITICAL Network	eclipse	vert.x	In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correct…	CWE-22 Path Traversal	CVE-2019-17640	2024-11-21 13:32	2020-10-16	Show	GitHub Exploit DB Packet Storm

222496	9.8	CRITICAL Network	jfrog	artifactory	Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely …	CWE-521 Weak Password Requirements	CVE-2019-17444	2024-11-21 13:32	2020-10-13	Show	GitHub Exploit DB Packet Storm

222497	8.1	HIGH Network	tibco	silver_fabric	The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via URLs. The attacker could theoretically so…	NVD-CWE-noinfo	CVE-2019-17339	2024-11-21 13:32	2020-08-12	Show	GitHub Exploit DB Packet Storm

222498	5.3	MEDIUM Network	eclipse	openj9	In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially craft…	CWE-843 Type Confusion	CVE-2019-17639	2024-11-21 13:32	2020-07-16	Show	GitHub Exploit DB Packet Storm

222499	7.1	HIGH Local	eclipse debian	web_tools_platform debian_linux	In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote serve…	CWE-611 XXE	CVE-2019-17637	2024-11-21 13:32	2020-07-16	Show	GitHub Exploit DB Packet Storm

222500	9.4	CRITICAL Network	eclipse	jetty	In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer conta…	CWE-672 Operation on a Resource after Expiration or Release	CVE-2019-17638	2024-11-21 13:32	2020-07-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed