Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253261 5 警告 Google - Linux 上で動作する Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-1436 2011-11-18 09:56 2011-04-27 Show GitHub Exploit DB Packet Storm
253262 5 警告 Google - Google Chrome におけるローカルファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2011-1435 2011-11-18 09:56 2011-04-27 Show GitHub Exploit DB Packet Storm
253263 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-1434 2011-11-18 09:55 2011-04-27 Show GitHub Exploit DB Packet Storm
253264 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2011-1305 2011-11-18 09:54 2011-04-27 Show GitHub Exploit DB Packet Storm
253265 5 警告 Google - Google Chrome におけるポップアップブロッカーを回避される脆弱性 CWE-noinfo
情報不足
CVE-2011-1304 2011-11-18 09:54 2011-04-27 Show GitHub Exploit DB Packet Storm
253266 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-1303 2011-11-18 09:53 2011-04-27 Show GitHub Exploit DB Packet Storm
253267 4.3 警告 サイバートラスト株式会社
Trolltech
ターボリナックス
レッドハット
- Qt の UTF-8 デコーダーにおけるクロスサイトスクリプティングおよびディレクトリトラバーサルの脆弱性 - CVE-2007-0242 2011-11-17 11:10 2007-04-3 Show GitHub Exploit DB Packet Storm
253268 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-0069 2011-11-17 11:04 2011-04-28 Show GitHub Exploit DB Packet Storm
253269 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-0070 2011-11-17 11:03 2011-04-28 Show GitHub Exploit DB Packet Storm
253270 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-0072 2011-11-17 11:02 2011-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225541 6.1 MEDIUM
Network
mfscripts yetishare log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scri… CWE-79
Cross-site Scripting
CVE-2019-19738 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
225542 8.8 HIGH
Network
mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on session cookies, allowing the cookie to be sent in cross-site requests and potentially be used in cross-site request forgery … CWE-352
 Origin Validation Error
CVE-2019-19737 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
225543 6.1 MEDIUM
Network
mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies, allowing the cookie to be read by script, which can potentially be used by attackers to obtain the cookie vi… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-19736 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
225544 9.1 CRITICAL
Network
mfscripts yetishare class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set t… CWE-916
 Use of Password Hash With Insufficient Computational Effort
CVE-2019-19735 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
225545 8.8 HIGH
Network
mfscripts yetishare _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate… CWE-89
SQL Injection
CVE-2019-19734 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
225546 6.1 MEDIUM
Network
mfscripts yetishare _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the fileIds parameter on the page, … CWE-79
Cross-site Scripting
CVE-2019-19733 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
225547 7.2 HIGH
Network
mfscripts yetishare translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSortDir_0 parameter into a SQL string. Thi… CWE-89
SQL Injection
CVE-2019-19732 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
225548 9.8 CRITICAL
Network
citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. CWE-22
Path Traversal
CVE-2019-19781 2024-11-21 13:35 2019-12-27 Show GitHub Exploit DB Packet Storm
225549 7.5 HIGH
Network
intelbras iwr_3000n_firmware An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} s… NVD-CWE-noinfo
CVE-2019-19996 2024-11-21 13:35 2019-12-27 Show GitHub Exploit DB Packet Storm
225550 8.8 HIGH
Network
intelbras iwr_3000n_firmware A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user. CWE-352
 Origin Validation Error
CVE-2019-19995 2024-11-21 13:35 2019-12-27 Show GitHub Exploit DB Packet Storm