Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253801	4.3	警告	オラクル	-	Oracle Database Server および Oracle Fusion Middleware における脆弱性	CWE-noinfo 情報不足	CVE-2011-2231	2011-08-1 11:31	2011-07-19	Show	GitHub Exploit DB Packet Storm

253802	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2011-2261	2011-08-1 11:30	2011-07-19	Show	GitHub Exploit DB Packet Storm

253803	5.1	警告	サイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAP Server の STARTTLS 実装における暗号化セッションにコマンドを挿入される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1926	2011-08-1 11:02	2011-05-23	Show	GitHub Exploit DB Packet Storm

253804	6.9	警告	GNU Project サイバートラスト株式会社レッドハット	-	bash-doc における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5374	2011-08-1 10:58	2008-12-8	Show	GitHub Exploit DB Packet Storm

253805	2.1	注意	レッドハット fedorahosted.org	-	SSSD の pam_parse_in_data_v2 関数におけるサービス運用妨害 (無限ループ、クラッシュおよびログイン防止) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4341	2011-08-1 10:57	2011-01-25	Show	GitHub Exploit DB Packet Storm

253806	10	危険	rsync.samba.org アップルレッドハット	-	rsync における隠しファイルを読込/書込される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-6200	2011-08-1 10:54	2007-12-1	Show	GitHub Exploit DB Packet Storm

253807	7.5	危険	アップル	-	Apple Mac OS X の ICU におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0206	2011-08-1 10:44	2011-06-24	Show	GitHub Exploit DB Packet Storm

253808	6.8	警告	アップル	-	Apple Mac OS X の ImageIO におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0204	2011-08-1 10:43	2011-06-24	Show	GitHub Exploit DB Packet Storm

253809	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0202	2011-08-1 10:41	2011-06-24	Show	GitHub Exploit DB Packet Storm

253810	7.5	危険	アップル	-	Apple Mac OS X の CoreFoundation フレームワークにおける一つずれ (off-by-one) エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-0201	2011-08-1 10:40	2011-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219741	7.6	HIGH Physics	capsuletech	smartlinx_neuron_2_firmware	A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A …	NVD-CWE-noinfo	CVE-2019-5024	2024-11-21 13:44	2019-04-12	Show	GitHub Exploit DB Packet Storm

219742	4.8	MEDIUM Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without c…	CWE-287 Improper Authentication	CVE-2019-5426	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

219743	8.8	HIGH Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privile…	CWE-78 OS Command	CVE-2019-5425	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

219744	8.8	HIGH Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user.	CWE-78 OS Command	CVE-2019-5424	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

219745	7.5	HIGH Network	http-live-simulator_project	http-live-simulator	Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.	CWE-22 Path Traversal	CVE-2019-5423	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

219746	6.1	MEDIUM Network	buttle_project	buttle	XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.	CWE-79 Cross-site Scripting	CVE-2019-5422	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

219747	9.8	CRITICAL Network	plataformatec	devise	Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempt…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-5421	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

219748	9.8	CRITICAL Network	rubyonrails debian fedoraproject	rails debian_linux fedora	A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can …	CWE-330 Use of Insufficiently Random Values	CVE-2019-5420	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

219749	7.5	HIGH Network	rubyonrails debian redhat opensuse fedoraproject	rails debian_linux software_collections cloudforms leap fedora	There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-5419	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

219750	7.5	HIGH Network	rubyonrails debian redhat opensuse fedoraproject	rails debian_linux cloudforms leap fedora software_collections	There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the targ…	NVD-CWE-noinfo	CVE-2019-5418	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed