Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252721	5.8	警告	Apache Software Foundation	-	Apache Tomcat におけるアクセス制限を回避される脆弱性	CWE-DesignError	CVE-2011-1183	2011-04-28 15:31	2011-04-1	Show	GitHub Exploit DB Packet Storm

252722	5	警告	Apache Software Foundation	-	Apache Tomcat の HTTP BIO コネクタにおけるレスポンスを閲覧される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1475	2011-04-28 15:29	2011-03-28	Show	GitHub Exploit DB Packet Storm

252723	2.1	注意	オラクル	-	Oracle Solaris 10 に認証情報漏えいの脆弱性	-	CVE-2011-0412	2011-04-28 15:27	2011-04-6	Show	GitHub Exploit DB Packet Storm

252724	-	-	デル	-	Dell Kace K2000 Systems Deployment Appliance に脆弱性	-	-	2011-04-28 15:21	2011-04-6	Show	GitHub Exploit DB Packet Storm

252725	-	-	ネットギア	-	Netgear Prosafe Wireless-N Access Point に複数の脆弱性	-	-	2011-04-28 15:19	2011-04-6	Show	GitHub Exploit DB Packet Storm

252726	7.2	危険	Prefix WhoIs Project	-	pWhois Layer Four Traceroute に権限昇格の脆弱性	CWE-noinfo 情報不足	CVE-2011-0765	2011-04-28 15:18	2011-04-5	Show	GitHub Exploit DB Packet Storm

252727	6.9	警告	レッドハット	-	policycoreutils パッケージの seunshare_mount 関数における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1011	2011-04-28 15:11	2011-02-24	Show	GitHub Exploit DB Packet Storm

252728	4.3	警告	マイクロソフト	-	Microsoft Windows にスクリプトインジェクションの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0096	2011-04-28 14:33	2011-01-31	Show	GitHub Exploit DB Packet Storm

252729	9.3	危険	マイクロソフト	-	Microsoft WMI Administrative Tools の WBEMSingleView.ocx ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3973	2011-04-28 14:29	2010-12-23	Show	GitHub Exploit DB Packet Storm

252730	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0811	2011-04-28 14:25	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214711	5.9	MEDIUM Network	etsi	enterprise_transport_security	The ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide per-session forward secrecy.	CWE-310 Cryptographic Issues	CVE-2019-9191	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

214712	9.8	CRITICAL Network	j2store	j2store	SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.	CWE-89 SQL Injection	CVE-2019-9184	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

214713	8.8	HIGH Network	zzzcms	zzzphp	There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the fi…	CWE-352 Origin Validation Error	CVE-2019-9182	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

214714	7.2	HIGH Network	schoolcms	schoolcms	SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code aft…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-9181	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

214715	9.8	CRITICAL Network	gnu netapp mcafee canonical	glibc steelstore_cloud_integrated_storage ontap_select_deploy_administration_utility cloud_backup web_gateway ubuntu_linux	In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.	CWE-125 Out-of-bounds Read	CVE-2019-9169	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

214716	6.1	MEDIUM Network	woocommerce	woocommerce	WooCommerce before 3.5.5 allows XSS via a Photoswipe caption.	CWE-79 Cross-site Scripting	CVE-2019-9168	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

214717	7.8	HIGH Local	linux netapp canonical	linux_kernel solidfire hci_management_node snapprotect ubuntu_linux cn1610_firmware	In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and w…	CWE-787 Out-of-bounds Write	CVE-2019-9162	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

214718	8.8	HIGH Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.	CWE-125 Out-of-bounds Read	CVE-2019-9152	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

214719	8.8	HIGH Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.	CWE-125 Out-of-bounds Read	CVE-2019-9151	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

214720	7.5	HIGH Adjacent	jamf	self_service	Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to insert "/Applications/Utilities/Terminal app/Contents/MacO…	NVD-CWE-noinfo	CVE-2019-9146	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed