Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252971	7.8	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4682	2011-02-24 16:33	2011-01-7	Show	GitHub Exploit DB Packet Storm

252972	7.5	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスにおける SMTP 検査機能を回避される脆弱性	CWE-noinfo 情報不足	CVE-2010-4681	2011-02-24 16:30	2011-01-7	Show	GitHub Exploit DB Packet Storm

252973	9	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスの WebVPN 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4680	2011-02-24 16:28	2011-01-7	Show	GitHub Exploit DB Packet Storm

252974	7.8	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4679	2011-02-24 16:26	2011-01-7	Show	GitHub Exploit DB Packet Storm

252975	7.5	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4678	2011-02-24 16:24	2011-01-7	Show	GitHub Exploit DB Packet Storm

252976	7.2	危険	Google	-	Open Handset Alliance Android の showLog 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0608	2011-02-24 14:42	2009-02-17	Show	GitHub Exploit DB Packet Storm

252977	7.2	危険	Google	-	Open Handset Alliance Android の malloc_leak.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0607	2011-02-24 14:40	2009-02-17	Show	GitHub Exploit DB Packet Storm

252978	4	警告	サイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3681	2011-02-24 14:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

252979	4	警告	サイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	Oracle MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3680	2011-02-24 14:27	2010-07-9	Show	GitHub Exploit DB Packet Storm

252980	9.3	危険	マイクロソフト	-	Microsoft Windows にバッファオーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-3970	2011-02-23 15:27	2011-01-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222001	9.8	CRITICAL Network	equinoxce	control_expert	Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code.	CWE-89 SQL Injection	CVE-2019-18234	2024-11-21 13:32	2019-12-24	Show	GitHub Exploit DB Packet Storm

222002	7.5	HIGH Network	apache debian opensuse canonical oracle	tomcat debian_linux leap ubuntu_linux transportation_management retail_order_broker micros_relate_crm_software instantis_enterprisetrack hyperion_infrastructure_technology …	When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The wind…	CWE-384 Session Fixation	CVE-2019-17563	2024-11-21 13:32	2019-12-24	Show	GitHub Exploit DB Packet Storm

222003	9.8	CRITICAL Network	apache debian canonical opensuse netapp oracle	log4j debian_linux ubuntu_linux leap oncommand_workflow_automation oncommand_system_manager retail_service_backbone weblogic_server application_testing_suite endeca_informa…	Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization ga…	CWE-502 Deserialization of Untrusted Data	CVE-2019-17571	2024-11-21 13:32	2019-12-21	Show	GitHub Exploit DB Packet Storm

222004	6.5	MEDIUM Adjacent	philips	veradius_unity_firmware pulsera_firmware endura_firmware	An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireless option (shipped between 2016-August 2018), Veradius Unity (718132) with ViewFo…	CWE-326 Inadequate Encryption Strength	CVE-2019-18263	2024-11-21 13:32	2019-12-21	Show	GitHub Exploit DB Packet Storm

222005	9.8	CRITICAL Network	paloaltonetworks	pan-os	Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC …	NVD-CWE-Other	CVE-2019-17440	2024-11-21 13:32	2019-12-21	Show	GitHub Exploit DB Packet Storm

222006	9.8	CRITICAL Network	joomsky	js_jobs	dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfiel…	CWE-89 SQL Injection	CVE-2019-17527	2024-11-21 13:32	2019-12-20	Show	GitHub Exploit DB Packet Storm

222007	7.8	HIGH Local	arista	cloudvision_portal	In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configl…	NVD-CWE-noinfo	CVE-2019-18181	2024-11-21 13:32	2019-12-20	Show	GitHub Exploit DB Packet Storm

222008	8.8	HIGH Network	eclipse	che	For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che workspace. Che with no authentication and …	CWE-352 Origin Validation Error	CVE-2019-17633	2024-11-21 13:32	2019-12-20	Show	GitHub Exploit DB Packet Storm

222009	7.8	HIGH Local	pronestor	planner	An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation in the Health Monitor service because PronestorHealthMonitor.exe access control i…	NVD-CWE-noinfo	CVE-2019-17390	2024-11-21 13:32	2019-12-19	Show	GitHub Exploit DB Packet Storm

222010	5.4	MEDIUM Network	ge	s2020_firmware s2020g_firmware	An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that …	CWE-79 Cross-site Scripting	CVE-2019-18267	2024-11-21 13:32	2019-12-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed