Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252551	7.5	危険	アップル	-	Apple Mac OS X の Apple Type Services (ATS) におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0230	2011-10-25 11:44	2011-10-14	Show	GitHub Exploit DB Packet Storm

252552	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services (ATS) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0229	2011-10-25 11:43	2011-10-14	Show	GitHub Exploit DB Packet Storm

252553	6.8	警告	アップル	-	Apple Mac OS X の CoreMedia における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0224	2011-10-25 11:30	2011-10-14	Show	GitHub Exploit DB Packet Storm

252554	9	危険	D-Link Systems, Inc.	-	D-Link DCS-2121 カメラの /etc/rc.d/rc.local におけるシェルアクセスを取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-4965	2011-10-24 16:58	2011-10-16	Show	GitHub Exploit DB Packet Storm

252555	9	危険	D-Link Systems, Inc.	-	D-Link DCS-2121 カメラの recorder_test.cgi における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4964	2011-10-24 16:58	2011-10-16	Show	GitHub Exploit DB Packet Storm

252556	2.1	注意	アップル	-	Apple iOS の設定コンポーネントにおける重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-3429	2011-10-24 16:50	2011-10-14	Show	GitHub Exploit DB Packet Storm

252557	9.3	危険	アップル	-	Apple iOS の設定コンポーネントにおける詳細不明な影響を受ける脆弱性	CWE-Other その他	CVE-2011-3430	2011-10-24 16:48	2011-10-14	Show	GitHub Exploit DB Packet Storm

252558	2.1	注意	アップル	-	Apple iOS のホームスクリーンコンポーネントにおける重要な状態情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3431	2011-10-24 16:47	2011-10-14	Show	GitHub Exploit DB Packet Storm

252559	5	警告	アップル	-	Apple iOS の UIKit アラートコンポーネントにおけるサービス運用妨害 (デバイスハング) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3432	2011-10-24 16:46	2011-10-14	Show	GitHub Exploit DB Packet Storm

252560	4.3	警告	アップル	-	Apple iOS の WiFi コンポーネントにおける重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-3434	2011-10-24 16:46	2011-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224711	9.8	CRITICAL Network	indexhibit	indexhibit	Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.	NVD-CWE-noinfo	CVE-2019-16314	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224712	7.5	HIGH Network	ifw8	fr6_firmware fr8_firmware fr5_firmware fr5-e_firmware fr6-s_firmware	ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.	CWE-798 Use of Hard-coded Credentials	CVE-2019-16313	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224713	6.1	MEDIUM Network	s-cms	s-cms	s-cms V3.0 has XSS in index.php?type=text via the S_id parameter.	CWE-79 Cross-site Scripting	CVE-2019-16312	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224714	8.8	HIGH Network	niushop	niushop	NIUSHOP V1.11 has CSRF via search_info to index.php.	CWE-352 Origin Validation Error	CVE-2019-16311	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224715	5.4	MEDIUM Network	niushop	niushop	NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.	CWE-79 Cross-site Scripting	CVE-2019-16310	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224716	9.8	CRITICAL Network	flamecms_project	flamecms	FlameCMS 3.3.5 has SQL injection in account/login.php via accountName.	CWE-89 SQL Injection	CVE-2019-16309	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224717	7.8	HIGH Local	notepad-plus-plus scintilla	notepad\+\+ scintilla	SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.	CWE-787 Out-of-bounds Write	CVE-2019-16294	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224718	8.8	HIGH Network	mobatek	mobaxterm	In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted,…	CWE-77 Command Injection	CVE-2019-16305	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

224719	9.8	CRITICAL Network	jhipster	jhipster jhipster_kotlin	A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils). This a…	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2019-16303	2024-11-21 13:30	2019-09-14	Show	GitHub Exploit DB Packet Storm

224720	8.8	HIGH Network	opmantek	open-audit	The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field.	CWE-78 OS Command	CVE-2019-16293	2024-11-21 13:30	2019-09-14	Show	GitHub Exploit DB Packet Storm