Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253101	6.8	警告	Django Software Foundation	-	Django の CSRF 保護メカニズムにおける認証されずに偽造されたリクエストを誘発される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4140	2011-10-25 16:54	2011-09-9	Show	GitHub Exploit DB Packet Storm

253102	5	警告	Django Software Foundation	-	Django におけるキャッシュポイズニング攻撃を誘発される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4139	2011-10-25 16:54	2011-09-9	Show	GitHub Exploit DB Packet Storm

253103	5	警告	Django Software Foundation	-	Django の URLField 実装内にある verify_exists 機能における任意の GET リクエストを誘発される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4138	2011-10-25 16:53	2011-09-9	Show	GitHub Exploit DB Packet Storm

253104	5	警告	Django Software Foundation	-	Django の URLField 実装内にある verify_exists 機能におけるサービス運用妨害 (リソース消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4137	2011-10-25 16:53	2011-09-9	Show	GitHub Exploit DB Packet Storm

253105	5.8	警告	Django Software Foundation	-	Django の django.contrib.sessions におけるセッションを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4136	2011-10-25 16:52	2011-09-9	Show	GitHub Exploit DB Packet Storm

253106	4.3	警告	シスコシステムズ	-	Cisco TelePresence Video Communication Servers の管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3294	2011-10-25 16:50	2011-10-12	Show	GitHub Exploit DB Packet Storm

253107	10	危険	ヒューレット・パッカード	-	HP Data Protector における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-3162	2011-10-25 16:50	2011-10-18	Show	GitHub Exploit DB Packet Storm

253108	10	危険	ヒューレット・パッカード	-	HP Data Protector における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-3161	2011-10-25 16:49	2011-10-18	Show	GitHub Exploit DB Packet Storm

253109	10	危険	ヒューレット・パッカード	-	HP Data Protector における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-3160	2011-10-25 16:48	2011-10-18	Show	GitHub Exploit DB Packet Storm

253110	10	危険	ヒューレット・パッカード	-	HP Data Protector における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-3159	2011-10-25 16:48	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225121	9.8	CRITICAL Network	bmc	myit_digital_workplace	BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Opera…	CWE-502 Deserialization of Untrusted Data	CVE-2019-16755	2024-11-21 13:31	2019-09-27	Show	GitHub Exploit DB Packet Storm

225122	5.3	MEDIUM Network	arm fedoraproject debian	mbed_crypto mbed_tls fedora debian_linux	Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private…	NVD-CWE-noinfo	CVE-2019-16910	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225123	5.4	MEDIUM Network	teampass	teampass	TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the ch…	CWE-79 Cross-site Scripting	CVE-2019-16904	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225124	5.3	MEDIUM Network	plutinosoft	platinum	Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead.	CWE-22 Path Traversal	CVE-2019-16903	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225125	5.3	MEDIUM Network	mediawiki fedoraproject debian	mediawiki fedora debian_linux	In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.	CWE-862 Missing Authorization	CVE-2019-16738	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225126	7.5	HIGH Network	advantech	webaccess\/hmi_designer	Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-16901	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225127	7.5	HIGH Network	advantech	webaccess\/hmi_designer	Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c.	NVD-CWE-noinfo	CVE-2019-16900	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225128	7.5	HIGH Network	advantech	webaccess\/hmi_designer	In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918.	NVD-CWE-noinfo	CVE-2019-16899	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225129	5.5	MEDIUM Local	rubyzip_project fedoraproject redhat	rubyzip fedora cloudforms	In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of servic…	NVD-CWE-noinfo	CVE-2019-16892	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225130	5.4	MEDIUM Network	halo	halo	Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.	CWE-79 Cross-site Scripting	CVE-2019-16890	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed