Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253631	9.3	危険	アップル	-	Apple iTunes で使用される CoreAudio におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3252	2011-10-19 11:13	2011-10-12	Show	GitHub Exploit DB Packet Storm

253632	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat の image-parsing ライブラリにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2438	2011-10-18 16:28	2011-09-13	Show	GitHub Exploit DB Packet Storm

253633	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2437	2011-10-18 16:28	2011-09-13	Show	GitHub Exploit DB Packet Storm

253634	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat の image-parsing ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2436	2011-10-18 16:28	2011-09-13	Show	GitHub Exploit DB Packet Storm

253635	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2435	2011-10-18 16:27	2011-09-13	Show	GitHub Exploit DB Packet Storm

253636	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2434	2011-10-18 16:27	2011-09-13	Show	GitHub Exploit DB Packet Storm

253637	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2433	2011-10-18 16:26	2011-09-13	Show	GitHub Exploit DB Packet Storm

253638	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat の U3D TIFF リソースにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2432	2011-10-18 16:25	2011-09-13	Show	GitHub Exploit DB Packet Storm

253639	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2431	2011-10-18 16:25	2011-09-13	Show	GitHub Exploit DB Packet Storm

253640	6.9	警告	アドビシステムズ	-	Adobe Reader における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-1353	2011-10-18 16:23	2011-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220011	7.5	HIGH Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.	CWE-22 Path Traversal	CVE-2019-6240	2024-11-21 13:46	2019-03-26	Show	GitHub Exploit DB Packet Storm

220012	8.8	HIGH Network	risi	gestao_de_horarios	RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.	CWE-89 SQL Injection	CVE-2019-6491	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220013	9.8	CRITICAL Network	blogengine	blogengine.net	An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx componen…	CWE-22 Path Traversal	CVE-2019-6714	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220014	5.9	MEDIUM Network	mastercard	qkr\!_with_masterpass	The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier.	CWE-295 Improper Certificate Validation	CVE-2019-6702	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220015	7.5	HIGH Network	python debian opensuse suse canonical	python-gnupg debian_linux leap backports ubuntu_linux	python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and …	CWE-20 Improper Input Validation	CVE-2019-6690	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220016	5.5	MEDIUM Local	qemu fedoraproject	qemu fedora	In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-6501	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220017	5.5	MEDIUM Local	iobit	smart_defrag	SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can b…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-6492	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220018	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wi…	CWE-352 Origin Validation Error	CVE-2019-6282	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220019	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, …	NVD-CWE-noinfo	CVE-2019-6279	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220020	8.8	HIGH Network	gl-inet	gl-ar300m-lite_firmware	Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.	CWE-77 Command Injection	CVE-2019-6275	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed