Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252131	10	危険	Google	-	Google Chrome における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1806	2011-11-21 11:16	2011-05-24	Show	GitHub Exploit DB Packet Storm

252132	5	警告	Google	-	Google Chrome におけるポップアップブロッカーを回避される脆弱性	CWE-noinfo 情報不足	CVE-2011-1801	2011-11-21 11:11	2011-05-24	Show	GitHub Exploit DB Packet Storm

252133	10	危険	Google	-	Google Chrome OS の dbugs パッケージにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-2171	2011-11-21 11:07	2011-05-16	Show	GitHub Exploit DB Packet Storm

252134	4.4	警告	Google	-	Google Chrome OS における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2011-2170	2011-11-21 11:06	2011-05-16	Show	GitHub Exploit DB Packet Storm

252135	7.2	危険	Google	-	Google Chrome OS における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2169	2011-11-21 11:05	2011-05-16	Show	GitHub Exploit DB Packet Storm

252136	6.8	警告	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1799	2011-11-21 11:02	2011-05-13	Show	GitHub Exploit DB Packet Storm

252137	9.3	危険	Google	-	Windows 7 上で稼働する Google Chrome における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2075	2011-11-21 10:53	2011-05-10	Show	GitHub Exploit DB Packet Storm

252138	10	危険	ヒューレット・パッカード	-	HP SAN/iQ の hydra.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4157	2011-11-18 16:34	2011-11-10	Show	GitHub Exploit DB Packet Storm

252139	4	警告	ヒューレット・パッカード	-	HP Directories Support for ProLiant Management Processors における脆弱性	CWE-noinfo 情報不足	CVE-2011-4158	2011-11-18 16:33	2011-11-16	Show	GitHub Exploit DB Packet Storm

252140	4.3	警告	ヒューレット・パッカード	-	HP Network Node Manager i におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4155	2011-11-18 16:32	2011-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224371	9.8	CRITICAL Network	jamf	jamf	An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service (DoS), remote code execution (RCE), an…	CWE-502 Deserialization of Untrusted Data	CVE-2019-17076	2024-11-21 13:31	2020-01-9	Show	GitHub Exploit DB Packet Storm

224372	5.4	MEDIUM Network	tencent	wechat	This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerabilit…	CWE-601 Open Redirect	CVE-2019-17151	2024-11-21 13:31	2020-01-8	Show	GitHub Exploit DB Packet Storm

224373	7.8	HIGH Local	parallels	parallels_desktop	This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14.1.3 (45485). An attacker must first obtain the ability to …	CWE-78 OS Command	CVE-2019-17148	2024-11-21 13:31	2020-01-8	Show	GitHub Exploit DB Packet Storm

224374	8.8	HIGH Network	tp-link	tl-wr841n_firmware	This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific…	CWE-120 Classic Buffer Overflow	CVE-2019-17147	2024-11-21 13:31	2020-01-8	Show	GitHub Exploit DB Packet Storm

224375	9.8	CRITICAL Network	dlink	dcs-935l_firmware dcs-960l_firmware	This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific…	CWE-306 Missing Authentication for Critical Function	CVE-2019-17146	2024-11-21 13:31	2020-01-8	Show	GitHub Exploit DB Packet Storm

224376	6.1	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.2 has XSS.	CWE-79 Cross-site Scripting	CVE-2019-16717	2024-11-21 13:31	2020-01-7	Show	GitHub Exploit DB Packet Storm

224377	6.6	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.2 has Incorrect Access Control.	CWE-276 Incorrect Default Permissions	CVE-2019-16716	2024-11-21 13:31	2020-01-7	Show	GitHub Exploit DB Packet Storm

224378	8.8	HIGH Network	tiny_file_manager_project	tiny_file_manager	In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only authenticated users are impacted.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-16790	2024-11-21 13:31	2019-12-31	Show	GitHub Exploit DB Packet Storm

224379	7.8	HIGH Local	k7computing	k7_ultimate_security	In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link…	CWE-59 Link Following	CVE-2019-16896	2024-11-21 13:31	2019-12-28	Show	GitHub Exploit DB Packet Storm

224380	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	In WordPress before 5.3.1, authenticated users with lower privileges (like contributors) can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admi…	CWE-79 Cross-site Scripting	CVE-2019-16781	2024-11-21 13:31	2019-12-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed