Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253871	10	危険	Measuresoft Development Ltd.	-	Measuresoft ScadaPro の service.exe における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3496	2011-09-26 15:40	2011-09-7	Show	GitHub Exploit DB Packet Storm

253872	10	危険	Measuresoft Development Ltd.	-	Measuresoft ScadaPro の service.exe における任意の DLL を実行される脆弱性	CWE-200 情報漏えい	CVE-2011-3497	2011-09-26 15:40	2011-09-16	Show	GitHub Exploit DB Packet Storm

253873	10	危険	Measuresoft Development Ltd.	-	Measuresoft ScadaPro の service.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-3495	2011-09-26 15:39	2011-09-16	Show	GitHub Exploit DB Packet Storm

253874	4.3	警告	TIBCO Software	-	TIBCO Managed File Transfer および Slingshot におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3423	2011-09-26 15:38	2011-09-13	Show	GitHub Exploit DB Packet Storm

253875	4.3	警告	TIBCO Software	-	TIBCO Managed File Transfer および Slingshot における Web セッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2011-3424	2011-09-26 15:37	2011-09-13	Show	GitHub Exploit DB Packet Storm

253876	10	危険	シスコシステムズ	-	Cisco Unified Service Monitor における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2738	2011-09-22 15:55	2011-09-14	Show	GitHub Exploit DB Packet Storm

253877	6.8	警告	Jaspersoft	-	JasperServer にクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-1911	2011-09-22 15:54	2011-09-16	Show	GitHub Exploit DB Packet Storm

253878	7.5	危険	LifeSize Communications	-	LifeSize Room appliance の Web インターフェイスにおける任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2763	2011-09-22 15:50	2011-09-2	Show	GitHub Exploit DB Packet Storm

253879	5	警告	LifeSize Communications	-	LifeSize Room appliance の Web インターフェイスにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-2762	2011-09-22 15:49	2011-09-2	Show	GitHub Exploit DB Packet Storm

253880	7.5	危険	Myrephp Programming	-	MYRE Real Estate Software の findagent.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-3394	2011-09-21 15:52	2011-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220381	7.5	HIGH Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html UR…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-7675	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220382	9.8	CRITICAL Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.	CWE-521 Weak Password Requirements	CVE-2019-7674	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220383	7.5	HIGH Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-7673	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220384	5.5	MEDIUM Local	elfutils_project debian canonical opensuse redhat	elfutils debian_linux ubuntu_linux leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_eus enterprise_linux_server_tus enter…	In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of s…	CWE-125 Out-of-bounds Read	CVE-2019-7665	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220385	5.5	MEDIUM Local	elfutils_project redhat	elfutils enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_a…	In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial…	CWE-787 Out-of-bounds Write	CVE-2019-7664	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220386	6.5	MEDIUM Network	libtiff debian canonical opensuse	libtiff debian_linux ubuntu_linux leap	An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote…	NVD-CWE-noinfo	CVE-2019-7663	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220387	6.5	MEDIUM Network	webassembly	binaryen	An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash…	CWE-617 Reachable Assertion	CVE-2019-7662	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220388	8.1	HIGH Network	genivia debian	gsoap debian_linux	Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWIT…	CWE-787 Out-of-bounds Write	CVE-2019-7659	2024-11-21 13:48	2019-02-9	Show	GitHub Exploit DB Packet Storm

220389	9.8	CRITICAL Network	rdflib_project debian canonical	rdflib debian_linux ubuntu_linux	The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in th…	CWE-427 Uncontrolled Search Path Element	CVE-2019-7653	2024-11-21 13:48	2019-02-9	Show	GitHub Exploit DB Packet Storm

220390	7.5	HIGH Network	emsisoft	anti-malware	EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directorie…	NVD-CWE-noinfo	CVE-2019-7651	2024-11-21 13:48	2019-02-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed