Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252301	3.5	注意	SemanticScuttle	-	SemanticScuttle におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2672	2011-09-16 12:00	2011-09-16	Show	GitHub Exploit DB Packet Storm

252302	1.2	注意	レッドハット Samba Project	-	Samba の mount.cifs 内にある check_mtab 関数におけるサービス運用妨害 (mtab 破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2724	2011-09-16 11:49	2011-08-29	Show	GitHub Exploit DB Packet Storm

252303	10	危険	The PHP Group	-	PHP の crypt 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3268	2011-09-15 13:41	2011-08-25	Show	GitHub Exploit DB Packet Storm

252304	5	警告	The PHP Group	-	PHP の error_log 関数におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3267	2011-09-15 13:40	2011-08-25	Show	GitHub Exploit DB Packet Storm

252305	4.3	警告	The PHP Group	-	PHP の crypt 関数における認証を回避される脆弱性	CWE-310 暗号の問題	CVE-2011-3189	2011-09-15 13:40	2011-08-25	Show	GitHub Exploit DB Packet Storm

252306	7.4	危険	シトリックス・システムズレッドハット	-	Xen におけるホスト OS の権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1898	2011-09-15 13:38	2011-08-12	Show	GitHub Exploit DB Packet Storm

252307	5.1	警告	レッドハット	-	foomatic-gui その他の製品で使用される pysmb.py における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2899	2011-09-15 13:37	2011-08-23	Show	GitHub Exploit DB Packet Storm

252308	5	警告	The PHP Group	-	PHP の addGlob および addPattern 関数におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1657	2011-09-14 10:52	2011-08-25	Show	GitHub Exploit DB Packet Storm

252309	5	警告	Zabbix	-	Zabbix における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3264	2011-09-14 10:50	2011-08-19	Show	GitHub Exploit DB Packet Storm

252310	5	警告	Zabbix	-	Zabbix の zabbix_agentd におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3263	2011-09-14 10:49	2011-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222161	7.8	HIGH Local	trendmicro	housecall_for_home_networks	A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited allowing an attacker to place a malicious DLL file into the application …	NVD-CWE-noinfo	CVE-2019-19688	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222162	7.5	HIGH Network	humaxdigital	hgb10r-02_firmware	An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over cleartext HTTP.	CWE-319 CWE-522 Cleartext Transmission of Sensitive Information Insufficiently Protected Credentials	CVE-2019-19890	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222163	7.5	HIGH Network	humaxdigital	hgb10r-02_firmware	An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-19889	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222164	6.5	MEDIUM Network	rockcarry	ffjpeg	jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.	CWE-369 Divide By Zero	CVE-2019-19888	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222165	6.5	MEDIUM Network	rockcarry	ffjpeg	bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.	CWE-476 NULL Pointer Dereference	CVE-2019-19887	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222166	9.8	CRITICAL Network	djangoproject canonical	django ubuntu_linux	Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2019-19844	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222167	6.5	MEDIUM Network	tautulli	tautulli	In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous access can be achieved in applications that do not have a user login area).	CWE-352 Origin Validation Error	CVE-2019-19833	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222168	8.8	HIGH Network	xerox	altalink_c8035_firmware	Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. (The frmUserName value must have a unique name.)	CWE-352 Origin Validation Error	CVE-2019-19832	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222169	5.4	MEDIUM Network	solarwinds	serv-u_ftp_server	A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.	CWE-79 Cross-site Scripting	CVE-2019-19829	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

222170	7.8	HIGH Local	shadow_project	shadow	shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affe…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19882	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed