Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253581	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における eProfile の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3528	2011-10-27 09:55	2011-10-18	Show	GitHub Exploit DB Packet Storm

253582	4	警告	オラクル	-	Oracle Siebel CRM の Siebel Core - UIF Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3526	2011-10-27 09:54	2011-10-18	Show	GitHub Exploit DB Packet Storm

253583	5.5	警告	オラクル	-	Oracle Siebel CRM の Siebel Core - UIF Client コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3518	2011-10-27 09:53	2011-10-18	Show	GitHub Exploit DB Packet Storm

253584	4.3	警告	オラクル	-	Oracle Siebel CRM の Siebel Apps - Marketing コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2316	2011-10-27 09:53	2011-10-18	Show	GitHub Exploit DB Packet Storm

253585	1.7	注意	オラクル	-	Oracle Solaris における Zone の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3539	2011-10-27 09:52	2011-10-18	Show	GitHub Exploit DB Packet Storm

253586	7.8	危険	オラクル	-	Oracle Solaris における Kernel/Filesystem の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3537	2011-10-27 09:52	2011-10-18	Show	GitHub Exploit DB Packet Storm

253587	2.1	注意	オラクル	-	Oracle Solaris における DTrace Software Library の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3536	2011-10-27 09:51	2011-10-18	Show	GitHub Exploit DB Packet Storm

253588	5	警告	オラクル	-	Oracle Solaris における Network Status Monitor の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3534	2011-10-27 09:50	2011-10-18	Show	GitHub Exploit DB Packet Storm

253589	1.7	注意	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2312	2011-10-27 09:50	2011-10-18	Show	GitHub Exploit DB Packet Storm

253590	1.7	注意	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2311	2011-10-27 09:49	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225421	9.8	CRITICAL Network	br-automation	industrial_automation_aprol	An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server,…	CWE-77 Command Injection	CVE-2019-19874	2024-11-21 13:35	2020-11-28	Show	GitHub Exploit DB Packet Storm

225422	7.5	HIGH Network	br-automation	industrial_automation_aprol	An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than …	NVD-CWE-noinfo	CVE-2019-19873	2024-11-21 13:35	2020-11-28	Show	GitHub Exploit DB Packet Storm

225423	9.8	CRITICAL Network	br-automation	industrial_automation_aprol	An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a d…	CWE-77 Command Injection	CVE-2019-19872	2024-11-21 13:35	2020-11-28	Show	GitHub Exploit DB Packet Storm

225424	7.5	HIGH Network	br-automation	industrial_automation_aprol	An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed (unencrypted) by using the IosHttp service and the JSON interface.	NVD-CWE-noinfo	CVE-2019-19869	2024-11-21 13:35	2020-11-28	Show	GitHub Exploit DB Packet Storm

225425	9.1	CRITICAL Network	bender	com465ip_firmware com465dp_firmware com465id_firmware cp700_firmware cp907_firmware cp915_firmware	In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorizati…	CWE-862 Missing Authorization	CVE-2019-19885	2024-11-21 13:35	2020-10-16	Show	GitHub Exploit DB Packet Storm

225426	7.5	HIGH Network	ise	smart_connect_knx_vaillant	ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-19643	2024-11-21 13:35	2020-08-15	Show	GitHub Exploit DB Packet Storm

225427	7.5	HIGH Network	jetbrains	upsource	In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.	NVD-CWE-noinfo	CVE-2019-19704	2024-11-21 13:35	2020-08-9	Show	GitHub Exploit DB Packet Storm

225428	6.1	MEDIUM Network	froala	froala_editor	Froala Editor before 3.2.3 allows XSS.	CWE-79 Cross-site Scripting	CVE-2019-19935	2024-11-21 13:35	2020-07-8	Show	GitHub Exploit DB Packet Storm

225429	7.8	HIGH Local	videolan	vlc_media_player	An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted i…	CWE-787 CWE-193 Out-of-bounds Write Off-by-one Error	CVE-2019-19721	2024-11-21 13:35	2020-05-16	Show	GitHub Exploit DB Packet Storm

225430	7.2	HIGH Network	centreon	centreon	There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguratio…	CWE-269 Improper Privilege Management	CVE-2019-19699	2024-11-21 13:35	2020-04-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed