Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252641 4.3 警告 ecoCMS - ecoCMS の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5046 2011-11-25 11:40 2011-11-23 Show GitHub Exploit DB Packet Storm
252642 7.5 危険 Alephsystem - CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5058 2011-11-25 10:14 2011-11-23 Show GitHub Exploit DB Packet Storm
252643 7.5 危険 Alephsystem - CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5057 2011-11-25 10:13 2011-11-23 Show GitHub Exploit DB Packet Storm
252644 7.5 危険 IXXO Internet Solutions - XOBBIX コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5053 2011-11-25 10:08 2011-11-23 Show GitHub Exploit DB Packet Storm
252645 4.3 警告 Joomla! - Joomla! におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4332 2011-11-25 09:39 2011-03-24 Show GitHub Exploit DB Packet Storm
252646 5 警告 Joomla! - Joomla! における任意のユーザのパスワードを変更される脆弱性 CWE-189
数値処理の問題 		CVE-2011-4321 2011-11-25 09:38 2011-10-28 Show GitHub Exploit DB Packet Storm
252647 7.6 危険 アップル - Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1516 2011-11-24 16:27 2011-11-15 Show GitHub Exploit DB Packet Storm
252648 7.6 危険 アップル - Apple Mac OS X におけるネットワークリソースにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7303 2011-11-24 16:27 2011-11-15 Show GitHub Exploit DB Packet Storm
252649 5 警告 IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
富士通
ヒューレット・パッカード
ターボリナックス
オラクル
日立
レッドハット		 - Apache HTTP Server の mod_cache および mod_dav モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-1452 2011-11-24 11:00 2010-07-25 Show GitHub Exploit DB Packet Storm
252650 10 危険 トレンドマイクロ
IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
富士通
ターボリナックス
オラクル
レッドハット		 - APR ライブラリおよび APR-util ライブラリにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2412 2011-11-24 10:57 2009-08-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221611 8.8 HIGH
Network 		ajenti ajenti A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack ca… CWE-78
OS Command  		CVE-2019-25066 2024-11-21 13:39 2022-06-10 Show GitHub Exploit DB Packet Storm
221612 9.8 CRITICAL
Network 		opennetadmin opennetadmin A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may b… CWE-78
OS Command  		CVE-2019-25065 2024-11-21 13:39 2022-06-10 Show GitHub Exploit DB Packet Storm
221613 8.8 HIGH
Network 		theaccessgroup corehr_core_portal A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site request forgery. It is possi… CWE-352
 Origin Validation Error 		CVE-2019-25064 2024-11-21 13:39 2022-06-10 Show GitHub Exploit DB Packet Storm
221614 7.8 HIGH
Local 		sricam deviceviewer A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Lo… CWE-787
 Out-of-bounds Write 		CVE-2019-25063 2024-11-21 13:39 2022-06-8 Show GitHub Exploit DB Packet Storm
221615 7.8 HIGH
Local 		sricam deviceviewer A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. … CWE-787
 Out-of-bounds Write 		CVE-2019-25062 2024-11-21 13:39 2022-06-8 Show GitHub Exploit DB Packet Storm
221616 7.5 HIGH
Network 		random_password_generator_project random_password_generator The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic nature, can facilitate password prediction. CWE-335
 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) 		CVE-2019-25061 2024-11-21 13:39 2022-05-18 Show GitHub Exploit DB Packet Storm
221617 5.3 MEDIUM
Network 		wpgraphql wpgraphql The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a remote attacker could forge a GraphQL que… - CVE-2019-25060 2024-11-21 13:39 2022-05-10 Show GitHub Exploit DB Packet Storm
221618 7.8 HIGH
Local 		artifex
debian 		ghostscript
debian_linux 		Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839. NVD-CWE-noinfo
CVE-2019-25059 2024-11-21 13:39 2022-04-25 Show GitHub Exploit DB Packet Storm
221619 7.8 HIGH
Local 		usbguard_project
fedoraproject
debian 		usbguard
fedora
debian_linux 		An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future. CWE-863
 Incorrect Authorization 		CVE-2019-25058 2024-11-21 13:39 2022-02-25 Show GitHub Exploit DB Packet Storm
221620 7.5 HIGH
Network 		r3 corda In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer. NVD-CWE-noinfo
CVE-2019-25057 2024-11-21 13:39 2022-02-15 Show GitHub Exploit DB Packet Storm