Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252591	5	警告	Puppet	-	Puppet Labs の Puppet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-3848	2011-11-4 15:00	2011-09-28	Show	GitHub Exploit DB Packet Storm

252592	4.3	警告	アップル	-	WebObjects におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3998	2011-11-4 14:03	2011-11-4	Show	GitHub Exploit DB Packet Storm

252593	6.4	警告	Opengear	-	複数の Opengear 製品における認証回避の脆弱性	CWE-287 不適切な認証	CVE-2011-3997	2011-11-4 14:02	2011-11-4	Show	GitHub Exploit DB Packet Storm

252594	9.3	危険	アップル	-	Windows 上で稼動する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-3251	2011-11-4 11:52	2011-10-26	Show	GitHub Exploit DB Packet Storm

252595	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-3250	2011-11-4 11:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

252596	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3249	2011-11-4 11:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

252597	9.3	危険	アップル	-	Apple QuickTime における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3248	2011-11-4 11:37	2011-10-28	Show	GitHub Exploit DB Packet Storm

252598	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-3247	2011-11-4 11:36	2011-10-28	Show	GitHub Exploit DB Packet Storm

252599	4.3	警告	IBM	-	IBM WebSphere ILOG Rule Team Server の content/error.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1371	2011-11-4 11:36	2011-10-11	Show	GitHub Exploit DB Packet Storm

252600	4.3	警告	IBM	-	IBM HTTP Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1360	2011-11-4 11:35	2011-08-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224791	7.5	HIGH Network	putty opensuse netapp	putty leap oncommand_unified_manager_core_package	PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.	CWE-416 Use After Free	CVE-2019-17069	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

224792	7.5	HIGH Network	putty opensuse	putty leap	PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.	CWE-74 Injection	CVE-2019-17068	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

224793	9.8	CRITICAL Network	putty	putty	PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-17067	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

224794	9.8	CRITICAL Network	fasterxml debian fedoraproject redhat oracle netapp	jackson-databind debian_linux fedora jboss_enterprise_application_platform banking_platform jd_edwards_enterpriseone_tools primavera_gateway weblogic_server webcenter_portal	A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSO…	CWE-502 Deserialization of Untrusted Data	CVE-2019-16943	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

224795	9.8	CRITICAL Network	fasterxml debian fedoraproject redhat netapp oracle	jackson-databind debian_linux fedora jboss_enterprise_application_platform steelstore_cloud_integrated_storage oncommand_workflow_automation service_level_manager oncommand_api_s…	A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSO…	CWE-502 Deserialization of Untrusted Data	CVE-2019-16942	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

224796	5.5	MEDIUM Local	glyphandcog	xpdfreader	Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor.	CWE-476 NULL Pointer Dereference	CVE-2019-17064	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

224797	5.5	MEDIUM Local	snowtide	pdfxstream	In Snowtide PDFxStream before 3.7.1 (for Java), a crafted PDF file can trigger an extremely long running computation because of page-tree mishandling.	NVD-CWE-noinfo	CVE-2019-17063	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

224798	3.3	LOW Local	linux	linux_kernel	llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka C…	CWE-276 Incorrect Default Permissions	CVE-2019-17056	2024-11-21 13:31	2019-10-1	Show	GitHub Exploit DB Packet Storm

224799	3.3	LOW Local	linux debian fedoraproject canonical opensuse redhat	linux_kernel debian_linux fedora ubuntu_linux leap enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation	base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw sock…	CWE-862 Missing Authorization	CVE-2019-17055	2024-11-21 13:31	2019-10-1	Show	GitHub Exploit DB Packet Storm

224800	3.3	LOW Local	linux	linux_kernel	atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka…	CWE-276 Incorrect Default Permissions	CVE-2019-17054	2024-11-21 13:31	2019-10-1	Show	GitHub Exploit DB Packet Storm