Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253581	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における eProfile の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3528	2011-10-27 09:55	2011-10-18	Show	GitHub Exploit DB Packet Storm

253582	4	警告	オラクル	-	Oracle Siebel CRM の Siebel Core - UIF Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3526	2011-10-27 09:54	2011-10-18	Show	GitHub Exploit DB Packet Storm

253583	5.5	警告	オラクル	-	Oracle Siebel CRM の Siebel Core - UIF Client コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3518	2011-10-27 09:53	2011-10-18	Show	GitHub Exploit DB Packet Storm

253584	4.3	警告	オラクル	-	Oracle Siebel CRM の Siebel Apps - Marketing コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2316	2011-10-27 09:53	2011-10-18	Show	GitHub Exploit DB Packet Storm

253585	1.7	注意	オラクル	-	Oracle Solaris における Zone の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3539	2011-10-27 09:52	2011-10-18	Show	GitHub Exploit DB Packet Storm

253586	7.8	危険	オラクル	-	Oracle Solaris における Kernel/Filesystem の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3537	2011-10-27 09:52	2011-10-18	Show	GitHub Exploit DB Packet Storm

253587	2.1	注意	オラクル	-	Oracle Solaris における DTrace Software Library の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3536	2011-10-27 09:51	2011-10-18	Show	GitHub Exploit DB Packet Storm

253588	5	警告	オラクル	-	Oracle Solaris における Network Status Monitor の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3534	2011-10-27 09:50	2011-10-18	Show	GitHub Exploit DB Packet Storm

253589	1.7	注意	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2312	2011-10-27 09:50	2011-10-18	Show	GitHub Exploit DB Packet Storm

253590	1.7	注意	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2311	2011-10-27 09:49	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221131	6.1	MEDIUM Network	ntt-east ntt-west	pr-s300ne_firmware rt-s300ne_firmware rv-s340ne_firmware pr-s300hi_firmware rt-s300hi_firmware rv-s340hi_firmware pr-s300se_firmware rt-s300se_firmware rv-s340se_firmware p…	Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firm…	CWE-79 Cross-site Scripting	CVE-2019-5985	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221132	6.1	MEDIUM Network	cybozu	garoon	Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.	CWE-601 Open Redirect	CVE-2019-5978	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221133	4.3	MEDIUM Network	cybozu	garoon	Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.	CWE-74 Injection	CVE-2019-5977	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221134	4.9	MEDIUM Network	cybozu	garoon	Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2019-5976	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221135	5.4	MEDIUM Network	cybozu	garoon	DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2019-5975	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221136	6.5	MEDIUM Network	wondercms	wondercms	Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors.	CWE-22 Path Traversal	CVE-2019-5956	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221137	5.3	MEDIUM Network	netapp	oncommand_workflow_automation	OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-5503	2024-11-21 13:45	2019-09-11	Show	GitHub Exploit DB Packet Storm

221138	7.2	HIGH Network	gitlab	gitlab	An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.	CWE-287 Improper Authentication	CVE-2019-5473	2024-11-21 13:45	2019-09-10	Show	GitHub Exploit DB Packet Storm

221139	5.3	MEDIUM Network	senecajs	seneca	Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.	CWE-209 Information Exposure Through an Error Message	CVE-2019-5483	2024-11-21 13:45	2019-09-10	Show	GitHub Exploit DB Packet Storm

221140	5.3	MEDIUM Network	statichttpserver_project	statichttpserver	A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.	CWE-22 Path Traversal	CVE-2019-5480	2024-11-21 13:45	2019-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed