Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252251	4.6	警告	Splunk	-	Splunk の Splunk Web 内にある mappy.py における任意のコードを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4642	2012-01-5 16:27	2011-12-12	Show	GitHub Exploit DB Packet Storm

252252	6.8	警告	Mozilla Foundation	-	Bugzilla の attachment.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-3669	2012-01-5 16:26	2011-11-20	Show	GitHub Exploit DB Packet Storm

252253	6.8	警告	Mozilla Foundation	-	Bugzilla の post_bug.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-3668	2012-01-5 16:26	2011-11-20	Show	GitHub Exploit DB Packet Storm

252254	6.8	警告	Mozilla Foundation	-	Bugzilla の User.offer_account_by_email の WebService メソッドにおける脆弱性	CWE-287 不適切な認証	CVE-2011-3667	2012-01-5 16:23	2011-12-17	Show	GitHub Exploit DB Packet Storm

252255	4.3	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3657	2012-01-5 16:21	2011-10-27	Show	GitHub Exploit DB Packet Storm

252256	9.3	危険	Steve Baker	-	PLIB の util/ulError.cxx 内の ulSetError 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4620	2012-01-5 16:21	2011-12-31	Show	GitHub Exploit DB Packet Storm

252257	1.2	注意	Celery	-	virtualenv の virtualenv.py における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-4617	2012-01-5 16:20	2011-12-31	Show	GitHub Exploit DB Packet Storm

252258	7.5	危険	Novell	-	Novell XTier framework の HTTP サーバにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1710	2012-01-5 16:19	2011-12-31	Show	GitHub Exploit DB Packet Storm

252259	4.3	警告	JJWDesign	-	PHP Booking Calendar の details_view.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5045	2012-01-5 16:14	2011-12-30	Show	GitHub Exploit DB Packet Storm

252260	7.2	危険	SopCast	-	SopCast における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5044	2012-01-5 16:13	2011-12-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225091	7.8	HIGH Local	tinywall	tinywall	Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and inc…	CWE-502 Deserialization of Untrusted Data	CVE-2019-19470	2024-11-21 13:34	2019-12-31	Show	GitHub Exploit DB Packet Storm

225092	5.4	MEDIUM Network	jetbrains	ktor	JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.	CWE-74 Injection	CVE-2019-19389	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

225093	9.8	CRITICAL Network	huawei	m5_lite_10_firmware	M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to modify th…	CWE-20 Improper Input Validation	CVE-2019-19398	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

225094	5.4	MEDIUM Network	cridio	listingpro	The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.	CWE-79 Cross-site Scripting	CVE-2019-19542	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

225095	5.4	MEDIUM Network	cridio	listingpro	The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page.	CWE-79 Cross-site Scripting	CVE-2019-19541	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

225096	6.1	MEDIUM Network	cridio	listingpro	The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage.	CWE-79 Cross-site Scripting	CVE-2019-19540	2024-11-21 13:34	2019-12-27	Show	GitHub Exploit DB Packet Storm

225097	5.5	MEDIUM Local	f5	big-iq_centralized_management big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big…	On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Ma…	CWE-269 Improper Privilege Management	CVE-2019-19151	2024-11-21 13:34	2019-12-24	Show	GitHub Exploit DB Packet Storm

225098	4.9	MEDIUM Network	f5	big-ip_access_policy_manager	On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP APM system logs the client-session-id when a per-session policy is attached …	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2019-19150	2024-11-21 13:34	2019-12-24	Show	GitHub Exploit DB Packet Storm

225099	6.5	MEDIUM Network	redhat	ceph_storage	A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by…	NVD-CWE-noinfo	CVE-2019-19337	2024-11-21 13:34	2019-12-24	Show	GitHub Exploit DB Packet Storm

225100	7.8	HIGH Local	broadcom	ca_client_automation	An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges.	NVD-CWE-Other	CVE-2019-19231	2024-11-21 13:34	2019-12-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed