Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253801	4.3	警告	オラクル	-	Oracle Database Server および Oracle Fusion Middleware における脆弱性	CWE-noinfo 情報不足	CVE-2011-2231	2011-08-1 11:31	2011-07-19	Show	GitHub Exploit DB Packet Storm

253802	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2011-2261	2011-08-1 11:30	2011-07-19	Show	GitHub Exploit DB Packet Storm

253803	5.1	警告	サイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAP Server の STARTTLS 実装における暗号化セッションにコマンドを挿入される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1926	2011-08-1 11:02	2011-05-23	Show	GitHub Exploit DB Packet Storm

253804	6.9	警告	GNU Project サイバートラスト株式会社レッドハット	-	bash-doc における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5374	2011-08-1 10:58	2008-12-8	Show	GitHub Exploit DB Packet Storm

253805	2.1	注意	レッドハット fedorahosted.org	-	SSSD の pam_parse_in_data_v2 関数におけるサービス運用妨害 (無限ループ、クラッシュおよびログイン防止) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4341	2011-08-1 10:57	2011-01-25	Show	GitHub Exploit DB Packet Storm

253806	10	危険	rsync.samba.org アップルレッドハット	-	rsync における隠しファイルを読込/書込される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-6200	2011-08-1 10:54	2007-12-1	Show	GitHub Exploit DB Packet Storm

253807	7.5	危険	アップル	-	Apple Mac OS X の ICU におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0206	2011-08-1 10:44	2011-06-24	Show	GitHub Exploit DB Packet Storm

253808	6.8	警告	アップル	-	Apple Mac OS X の ImageIO におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0204	2011-08-1 10:43	2011-06-24	Show	GitHub Exploit DB Packet Storm

253809	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0202	2011-08-1 10:41	2011-06-24	Show	GitHub Exploit DB Packet Storm

253810	7.5	危険	アップル	-	Apple Mac OS X の CoreFoundation フレームワークにおける一つずれ (off-by-one) エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-0201	2011-08-1 10:40	2011-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225151	6.5	MEDIUM Network	hongcms_project	hongcms	HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. (If the attacker deletes config.php and…	CWE-22 Path Traversal	CVE-2019-16867	2024-11-21 13:31	2019-09-25	Show	GitHub Exploit DB Packet Storm

225152	9.8	CRITICAL Network	vbulletin	vbulletin	vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.	CWE-94 Code Injection	CVE-2019-16759	2024-11-21 13:31	2019-09-25	Show	GitHub Exploit DB Packet Storm

225153	6.1	MEDIUM Network	joomla	joomla\!	In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.	CWE-79 Cross-site Scripting	CVE-2019-16725	2024-11-21 13:31	2019-09-25	Show	GitHub Exploit DB Packet Storm

225154	9.8	CRITICAL Network	upredsun	file_sharing_wizard	File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar iss…	CWE-120 Classic Buffer Overflow	CVE-2019-16724	2024-11-21 13:31	2019-09-25	Show	GitHub Exploit DB Packet Storm

225155	7.5	HIGH Network	riot-os	riot	RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node running RIOT. This requires spoofing an MQTT server…	CWE-476 NULL Pointer Dereference	CVE-2019-16754	2024-11-21 13:31	2019-09-25	Show	GitHub Exploit DB Packet Storm

225156	6.1	MEDIUM Network	devise_token_auth_project	devise_token_auth	An issue was discovered in Devise Token Auth through 1.1.2. The omniauth failure endpoint is vulnerable to Reflected Cross Site Scripting (XSS) through the message parameter. Unauthenticated attacker…	CWE-79 Cross-site Scripting	CVE-2019-16751	2024-11-21 13:31	2019-09-25	Show	GitHub Exploit DB Packet Storm

225157	9.8	CRITICAL Network	wolfssl	wolfssl	In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in Chec…	CWE-125 Out-of-bounds Read	CVE-2019-16748	2024-11-21 13:31	2019-09-24	Show	GitHub Exploit DB Packet Storm

225158	9.8	CRITICAL Network	linux debian canonical fedoraproject opensuse	linux_kernel debian_linux ubuntu_linux fedora leap	An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.	CWE-120 Classic Buffer Overflow	CVE-2019-16746	2024-11-21 13:31	2019-09-24	Show	GitHub Exploit DB Packet Storm

225159	7.8	HIGH Local	pam-python_project debian canonical	pam-python debian_linux ubuntu_linux	pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups.	NVD-CWE-noinfo	CVE-2019-16729	2024-11-21 13:31	2019-09-24	Show	GitHub Exploit DB Packet Storm

225160	6.1	MEDIUM Network	cure53 debian	dompurify debian_linux	DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari.	CWE-79 Cross-site Scripting	CVE-2019-16728	2024-11-21 13:31	2019-09-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed