Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253571	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性	CWE-noinfo 情報不足	CVE-2011-2309	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

253572	6.8	警告	オラクル	-	Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3538	2011-10-27 10:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

253573	5.5	警告	オラクル	-	Oracle Linux の Oracle Validated 処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2306	2011-10-27 10:05	2011-10-19	Show	GitHub Exploit DB Packet Storm

253574	2.1	注意	オラクル	-	複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3522	2011-10-27 10:04	2011-10-18	Show	GitHub Exploit DB Packet Storm

253575	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における JPM の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3533	2011-10-27 10:03	2011-10-18	Show	GitHub Exploit DB Packet Storm

253576	4	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3529	2011-10-27 10:01	2011-10-18	Show	GitHub Exploit DB Packet Storm

253577	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3527	2011-10-27 10:01	2011-10-18	Show	GitHub Exploit DB Packet Storm

253578	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise PeopleTools におけるセキュリティの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2315	2011-10-27 09:59	2011-10-18	Show	GitHub Exploit DB Packet Storm

253579	2.8	注意	オラクル	-	Oracle PeopleSoft Enterprise PeopleTools における Personalization の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3520	2011-10-27 09:59	2011-10-18	Show	GitHub Exploit DB Packet Storm

253580	4	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における eDevelopment の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3530	2011-10-27 09:58	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221131	6.1	MEDIUM Network	ntt-east ntt-west	pr-s300ne_firmware rt-s300ne_firmware rv-s340ne_firmware pr-s300hi_firmware rt-s300hi_firmware rv-s340hi_firmware pr-s300se_firmware rt-s300se_firmware rv-s340se_firmware p…	Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firm…	CWE-79 Cross-site Scripting	CVE-2019-5985	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221132	6.1	MEDIUM Network	cybozu	garoon	Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.	CWE-601 Open Redirect	CVE-2019-5978	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221133	4.3	MEDIUM Network	cybozu	garoon	Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.	CWE-74 Injection	CVE-2019-5977	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221134	4.9	MEDIUM Network	cybozu	garoon	Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2019-5976	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221135	5.4	MEDIUM Network	cybozu	garoon	DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2019-5975	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221136	6.5	MEDIUM Network	wondercms	wondercms	Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors.	CWE-22 Path Traversal	CVE-2019-5956	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221137	5.3	MEDIUM Network	netapp	oncommand_workflow_automation	OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-5503	2024-11-21 13:45	2019-09-11	Show	GitHub Exploit DB Packet Storm

221138	7.2	HIGH Network	gitlab	gitlab	An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.	CWE-287 Improper Authentication	CVE-2019-5473	2024-11-21 13:45	2019-09-10	Show	GitHub Exploit DB Packet Storm

221139	5.3	MEDIUM Network	senecajs	seneca	Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.	CWE-209 Information Exposure Through an Error Message	CVE-2019-5483	2024-11-21 13:45	2019-09-10	Show	GitHub Exploit DB Packet Storm

221140	5.3	MEDIUM Network	statichttpserver_project	statichttpserver	A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.	CWE-22 Path Traversal	CVE-2019-5480	2024-11-21 13:45	2019-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed