Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253751	10	危険	シスコシステムズ	-	Cisco Identity Services Engine における設定を変更される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-3290	2011-09-27 11:07	2011-09-20	Show	GitHub Exploit DB Packet Storm

253752	4.3	警告	Roundcube.net	-	Roundcube Webmail の UI メッセージ機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2937	2011-09-27 11:05	2011-08-9	Show	GitHub Exploit DB Packet Storm

253753	6.8	警告	AmmSoft	-	AmmSoft ScriptFTP にバッファオーバーフローの脆弱性	-	CVE-2011-3976	2011-09-27 10:58	2011-09-21	Show	GitHub Exploit DB Packet Storm

253754	10	危険	Measuresoft Development Ltd.	-	Measuresoft ScadaPro の service.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3490	2011-09-26 15:59	2011-09-16	Show	GitHub Exploit DB Packet Storm

253755	4.6	警告	レッドハット	-	Red Hat Enterprise MRG の Cumin における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-2925	2011-09-26 15:43	2011-09-7	Show	GitHub Exploit DB Packet Storm

253756	5	警告	Zoho Corporation	-	ManageEngine ServiceDesk Plus の encryptPassword 関数における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-1509	2011-09-26 15:42	2011-09-20	Show	GitHub Exploit DB Packet Storm

253757	4.3	警告	Zoho Corporation	-	ManageEngine ServiceDesk Plus の SolutionSearch.do におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1510	2011-09-26 15:41	2011-09-20	Show	GitHub Exploit DB Packet Storm

253758	10	危険	Measuresoft Development Ltd.	-	Measuresoft ScadaPro の service.exe における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3496	2011-09-26 15:40	2011-09-7	Show	GitHub Exploit DB Packet Storm

253759	10	危険	Measuresoft Development Ltd.	-	Measuresoft ScadaPro の service.exe における任意の DLL を実行される脆弱性	CWE-200 情報漏えい	CVE-2011-3497	2011-09-26 15:40	2011-09-16	Show	GitHub Exploit DB Packet Storm

253760	10	危険	Measuresoft Development Ltd.	-	Measuresoft ScadaPro の service.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-3495	2011-09-26 15:39	2011-09-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219131	9.8	CRITICAL Network	coship	rt3052_firmware rt3050_firmware wm3300_firmware rt7620_firmware	An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST requ…	CWE-306 Missing Authentication for Critical Function	CVE-2019-7564	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219132	6.1	MEDIUM Network	rukovoditel	rukovoditel	Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.	CWE-79 Cross-site Scripting	CVE-2019-7541	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219133	8.1	HIGH Network	kde opensuse fedoraproject	kauth leap backports fedora	KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of …	CWE-20 Improper Input Validation	CVE-2019-7443	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219134	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter.	CWE-79 Cross-site Scripting	CVE-2019-7427	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219135	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter.	CWE-79 Cross-site Scripting	CVE-2019-7426	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219136	8.1	HIGH Network	sonicwall	global_management_system	A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.…	CWE-1188 Insecure Default Initialization of Resource	CVE-2019-7476	2024-11-21 13:48	2019-04-27	Show	GitHub Exploit DB Packet Storm

219137	9.8	CRITICAL Network	nice	engage	In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers t…	CWE-306 Missing Authentication for Critical Function	CVE-2019-7727	2024-11-21 13:48	2019-04-24	Show	GitHub Exploit DB Packet Storm

219138	9.8	CRITICAL Network	auth0	auth0-wcf-service-jwt	Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker…	CWE-209 Information Exposure Through an Error Message	CVE-2019-7644	2024-11-21 13:48	2019-04-12	Show	GitHub Exploit DB Packet Storm

219139	9.0	CRITICAL Network	cantemo	portal	Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could en…	CWE-79 Cross-site Scripting	CVE-2019-7551	2024-11-21 13:48	2019-04-11	Show	GitHub Exploit DB Packet Storm

219140	7.8	HIGH Local	autodesk	advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d	An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Aut…	CWE-502 Deserialization of Untrusted Data	CVE-2019-7361	2024-11-21 13:48	2019-04-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed