Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253781	7.4	危険	シトリックス・システムズレッドハット	-	Xen におけるホスト OS の権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1898	2011-09-15 13:38	2011-08-12	Show	GitHub Exploit DB Packet Storm

253782	5.1	警告	レッドハット	-	foomatic-gui その他の製品で使用される pysmb.py における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2899	2011-09-15 13:37	2011-08-23	Show	GitHub Exploit DB Packet Storm

253783	5	警告	The PHP Group	-	PHP の addGlob および addPattern 関数におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1657	2011-09-14 10:52	2011-08-25	Show	GitHub Exploit DB Packet Storm

253784	5	警告	Zabbix	-	Zabbix における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3264	2011-09-14 10:50	2011-08-19	Show	GitHub Exploit DB Packet Storm

253785	5	警告	Zabbix	-	Zabbix の zabbix_agentd におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3263	2011-09-14 10:49	2011-08-19	Show	GitHub Exploit DB Packet Storm

253786	4.3	警告	Zabbix	-	Zabbix の acknow.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2904	2011-09-14 10:48	2011-08-19	Show	GitHub Exploit DB Packet Storm

253787	5.4	警告	Squid-cache.org インターネットイニシアティブ	-	透過型プロキシサーバが HTTP の Host ヘッダに依存して接続を行う問題	CWE-264 認可・権限・アクセス制御	CVE-2009-0801	2011-09-14 10:47	2009-02-24	Show	GitHub Exploit DB Packet Storm

253788	6.8	警告	レッドハット Pango.org オラクル	-	HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2011-0064	2011-09-14 10:45	2011-03-1	Show	GitHub Exploit DB Packet Storm

253789	6.5	警告	ヒューレット・パッカードシマンテック日立	-	Symantec Backup Exec における NDMP コマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0546	2011-09-14 10:44	2011-05-26	Show	GitHub Exploit DB Packet Storm

253790	5	警告	The PHP Group	-	PHP で使用される crypt_blowfish におけるクリアテキストのパスワードを容易に推測される脆弱性	CWE-310 暗号の問題	CVE-2011-2483	2011-09-13 10:43	2011-08-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219131	9.8	CRITICAL Network	coship	rt3052_firmware rt3050_firmware wm3300_firmware rt7620_firmware	An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST requ…	CWE-306 Missing Authentication for Critical Function	CVE-2019-7564	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219132	6.1	MEDIUM Network	rukovoditel	rukovoditel	Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.	CWE-79 Cross-site Scripting	CVE-2019-7541	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219133	8.1	HIGH Network	kde opensuse fedoraproject	kauth leap backports fedora	KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of …	CWE-20 Improper Input Validation	CVE-2019-7443	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219134	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter.	CWE-79 Cross-site Scripting	CVE-2019-7427	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219135	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter.	CWE-79 Cross-site Scripting	CVE-2019-7426	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

219136	8.1	HIGH Network	sonicwall	global_management_system	A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.…	CWE-1188 Insecure Default Initialization of Resource	CVE-2019-7476	2024-11-21 13:48	2019-04-27	Show	GitHub Exploit DB Packet Storm

219137	9.8	CRITICAL Network	nice	engage	In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers t…	CWE-306 Missing Authentication for Critical Function	CVE-2019-7727	2024-11-21 13:48	2019-04-24	Show	GitHub Exploit DB Packet Storm

219138	9.8	CRITICAL Network	auth0	auth0-wcf-service-jwt	Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker…	CWE-209 Information Exposure Through an Error Message	CVE-2019-7644	2024-11-21 13:48	2019-04-12	Show	GitHub Exploit DB Packet Storm

219139	9.0	CRITICAL Network	cantemo	portal	Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could en…	CWE-79 Cross-site Scripting	CVE-2019-7551	2024-11-21 13:48	2019-04-11	Show	GitHub Exploit DB Packet Storm

219140	7.8	HIGH Local	autodesk	advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d	An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Aut…	CWE-502 Deserialization of Untrusted Data	CVE-2019-7361	2024-11-21 13:48	2019-04-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed