Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253311	5.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の JavaScript の実装における選択したキーストロークを送信される脆弱性	CWE-200 情報漏えい	CVE-2010-1125	2011-01-6 14:43	2010-06-22	Show	GitHub Exploit DB Packet Storm

253312	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-3772	2011-01-5 15:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

253313	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey における任意の JavaScript コードを実行される脆弱性	CWE-DesignError	CVE-2010-3771	2011-01-5 15:39	2010-12-9	Show	GitHub Exploit DB Packet Storm

253314	9.3	危険	Mozilla Foundation	-	Windows 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3769	2011-01-5 15:21	2010-12-9	Show	GitHub Exploit DB Packet Storm

253315	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-119 CWE-noinfo	CVE-2010-3778	2011-01-5 15:12	2010-12-9	Show	GitHub Exploit DB Packet Storm

253316	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1202	2011-01-5 14:44	2010-06-22	Show	GitHub Exploit DB Packet Storm

253317	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1201	2011-01-5 14:43	2010-06-22	Show	GitHub Exploit DB Packet Storm

253318	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1200	2011-01-5 14:42	2010-06-22	Show	GitHub Exploit DB Packet Storm

253319	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の XSLT node sorting の実装における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1199	2011-01-5 14:41	2010-06-22	Show	GitHub Exploit DB Packet Storm

253320	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1198	2011-01-5 14:40	2010-06-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221971	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Sender email for automatic emails (default value in php.i…	CWE-79 Cross-site Scripting	CVE-2019-17578	2024-11-21 13:32	2019-10-17	Show	GitHub Exploit DB Packet Storm

221972	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Email used for error returns emails (fields 'Errors-To' i…	CWE-79 Cross-site Scripting	CVE-2019-17577	2024-11-21 13:32	2019-10-17	Show	GitHub Exploit DB Packet Storm

221973	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the /admin/mails.php?action=edit URI via the "Send all emails to (instead of real recipients, for test…	CWE-79 Cross-site Scripting	CVE-2019-17576	2024-11-21 13:32	2019-10-17	Show	GitHub Exploit DB Packet Storm

221974	6.1	MEDIUM Network	limesurvey	limesurvey	A cross-site scripting (XSS) vulnerability in admin/translate/translateheader_view.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang p…	CWE-79 Cross-site Scripting	CVE-2019-17660	2024-11-21 13:32	2019-10-17	Show	GitHub Exploit DB Packet Storm

221975	4.8	MEDIUM Network	cmsmadesimple	cms_made_simple	CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "News > Add Article" screen.	CWE-79 Cross-site Scripting	CVE-2019-17630	2024-11-21 13:32	2019-10-16	Show	GitHub Exploit DB Packet Storm

221976	4.8	MEDIUM Network	cmsmadesimple	cms_made_simple	CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "file manager > upload images" screen.	CWE-79 Cross-site Scripting	CVE-2019-17629	2024-11-21 13:32	2019-10-16	Show	GitHub Exploit DB Packet Storm

221977	6.5	MEDIUM Adjacent	yalehome	yale_bluetooth_key	The Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by sniffing Bluetooth Low Energy (BLE) traffic during one authorized unlock action, and then calculating the a…	CWE-287 Improper Authentication	CVE-2019-17627	2024-11-21 13:32	2019-10-16	Show	GitHub Exploit DB Packet Storm

221978	9.8	CRITICAL Network	reportlab	reportlab	ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.	CWE-91 Blind XPath Injection	CVE-2019-17626	2024-11-21 13:32	2019-10-16	Show	GitHub Exploit DB Packet Storm

221979	9.0	CRITICAL Network	rambox	rambox	There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field …	CWE-79 CWE-78 Cross-site Scripting OS Command	CVE-2019-17625	2024-11-21 13:32	2019-10-16	Show	GitHub Exploit DB Packet Storm

221980	7.8	HIGH Local	x.org	x_server	"" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.c_char 1000 times, an attacker can cause a denial of service (application …	CWE-787 Out-of-bounds Write	CVE-2019-17624	2024-11-21 13:32	2019-10-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed