Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252311	4.3	警告	Zabbix	-	Zabbix の acknow.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2904	2011-09-14 10:48	2011-08-19	Show	GitHub Exploit DB Packet Storm

252312	5.4	警告	Squid-cache.org インターネットイニシアティブ	-	透過型プロキシサーバが HTTP の Host ヘッダに依存して接続を行う問題	CWE-264 認可・権限・アクセス制御	CVE-2009-0801	2011-09-14 10:47	2009-02-24	Show	GitHub Exploit DB Packet Storm

252313	6.8	警告	レッドハット Pango.org オラクル	-	HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2011-0064	2011-09-14 10:45	2011-03-1	Show	GitHub Exploit DB Packet Storm

252314	6.5	警告	ヒューレット・パッカードシマンテック日立	-	Symantec Backup Exec における NDMP コマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0546	2011-09-14 10:44	2011-05-26	Show	GitHub Exploit DB Packet Storm

252315	5	警告	The PHP Group	-	PHP で使用される crypt_blowfish におけるクリアテキストのパスワードを容易に推測される脆弱性	CWE-310 暗号の問題	CVE-2011-2483	2011-09-13 10:43	2011-08-25	Show	GitHub Exploit DB Packet Storm

252316	6.4	警告	The PHP Group	-	PHP の main/rfc1867.c 内にある rfc1867_post_handler 関数における任意のファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2202	2011-09-13 10:42	2011-06-16	Show	GitHub Exploit DB Packet Storm

252317	7.5	危険	The PHP Group	-	PHP の socket_connect 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1938	2011-09-13 10:41	2011-05-31	Show	GitHub Exploit DB Packet Storm

252318	7.5	危険	The PHP Group	-	PHP の substr_replace 関数におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1148	2011-09-13 10:39	2011-03-18	Show	GitHub Exploit DB Packet Storm

252319	6.8	警告	GNU Project オラクル	-	GNU Wget における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2252	2011-09-12 09:56	2010-07-6	Show	GitHub Exploit DB Packet Storm

252320	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行されるの脆弱性	CWE-399 リソース管理の問題	CVE-2011-2955	2011-09-12 09:53	2011-08-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222061	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-20…	NVD-CWE-noinfo	CVE-2019-1320	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222062	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.	NVD-CWE-noinfo	CVE-2019-1319	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222063	5.9	MEDIUM Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2019 windows_7 windows_rt_8.1	A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.	CWE-290 Authentication Bypass by Spoofing	CVE-2019-1318	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222064	7.3	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.	CWE-59 Link Following	CVE-2019-1317	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222065	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft Windows Setup Elevation of Privilege Vulnerability'.	NVD-CWE-noinfo	CVE-2019-1316	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222066	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE…	CWE-59 Link Following	CVE-2019-1315	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222067	6.8	MEDIUM Physics	microsoft	windows_10_mobile	A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen, aka 'Windows 10 Mobile Security Feature Bypass Vu…	NVD-CWE-noinfo	CVE-2019-1314	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222068	6.5	MEDIUM Network	microsoft	sql_server_management_studio	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulne…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-1313	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222069	7.8	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.	NVD-CWE-noinfo	CVE-2019-1311	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm

222070	7.5	HIGH Network	microsoft	chakracore edge	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. Th…	CWE-787 Out-of-bounds Write	CVE-2019-1308	2024-11-21 13:36	2019-10-10	Show	GitHub Exploit DB Packet Storm