Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252381	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:07	2010-04-25	Show	GitHub Exploit DB Packet Storm

252382	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:06	2010-04-25	Show	GitHub Exploit DB Packet Storm

252383	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:03	2010-04-25	Show	GitHub Exploit DB Packet Storm

252384	5	警告	The Perl Foundation レッドハット	-	Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1487	2011-05-26 09:55	2011-03-1	Show	GitHub Exploit DB Packet Storm

252385	7.5	危険	IBM サイバートラスト株式会社サン・マイクロシステムズ Sendmail Consortium ターボリナックスヒューレット・パッカードレッドハット	-	sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4565	2011-05-26 09:52	2010-01-4	Show	GitHub Exploit DB Packet Storm

252386	5	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5845	2011-05-25 14:03	2011-05-25	Show	GitHub Exploit DB Packet Storm

252387	9.3	危険	マイクロソフト	-	Microsoft PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1270	2011-05-25 12:24	2011-05-10	Show	GitHub Exploit DB Packet Storm

252388	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1269	2011-05-25 12:22	2011-05-10	Show	GitHub Exploit DB Packet Storm

252389	9.3	危険	マイクロソフト	-	Microsoft Windows の WINS における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1248	2011-05-25 12:15	2011-05-10	Show	GitHub Exploit DB Packet Storm

252390	7.5	危険	サムスン	-	Samsung Integrated Management System DMS に SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4284	2011-05-25 12:12	2011-05-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224131	7.5	HIGH Network	xbornid	xbornid	An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo (wrong case: XBornID versus XBORNID) that al…	NVD-CWE-noinfo	CVE-2019-15078	2024-11-21 13:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

224132	7.5	HIGH Network	cisco	roomos telepresence_collaboration_endpoint	Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service …	CWE-20 Improper Input Validation	CVE-2019-15289	2024-11-21 13:28	2020-09-23	Show	GitHub Exploit DB Packet Storm

224133	7.8	HIGH Local	cisco	webex_meetings webex_meetings_online webex_meetings_server	Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected sy…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15287	2024-11-21 13:28	2020-09-23	Show	GitHub Exploit DB Packet Storm

224134	7.8	HIGH Local	cisco	webex_meetings webex_meetings_online webex_meetings_server	Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected sy…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15285	2024-11-21 13:28	2020-09-23	Show	GitHub Exploit DB Packet Storm

224135	7.8	HIGH Local	cisco	webex_meetings webex_meetings_online webex_meetings_server	Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected sy…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15283	2024-11-21 13:28	2020-09-23	Show	GitHub Exploit DB Packet Storm

224136	8.8	HIGH Network	linkplay	linkplay	An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the man…	NVD-CWE-noinfo	CVE-2019-15312	2024-11-21 13:28	2020-07-2	Show	GitHub Exploit DB Packet Storm

224137	9.8	CRITICAL Network	linkplay	linkplay	An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80…	CWE-78 OS Command	CVE-2019-15311	2024-11-21 13:28	2020-07-2	Show	GitHub Exploit DB Packet Storm

224138	9.8	CRITICAL Network	linkplay	linkplay	An issue was discovered on various devices via the Linkplay firmware. There is WAN remote code execution without user interaction. An attacker could retrieve the AWS key from the firmware and obtain …	CWE-78 CWE-639 OS Command Authorization Bypass Through User-Controlled Key	CVE-2019-15310	2024-11-21 13:28	2020-07-2	Show	GitHub Exploit DB Packet Storm

224139	7.2	HIGH Network	vikisolutions	vera	The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-15123	2024-11-21 13:28	2020-06-13	Show	GitHub Exploit DB Packet Storm

224140	6.1	MEDIUM Network	zohocorp	manageengine_servicedesk_plus	Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a workstation local administrator. Using the installed program names of the computer as…	CWE-79 Cross-site Scripting	CVE-2019-15083	2024-11-21 13:28	2020-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed