Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254041	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0186	2011-08-12 10:57	2011-03-23	Show	GitHub Exploit DB Packet Storm

254042	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1797	2011-08-11 10:44	2011-07-21	Show	GitHub Exploit DB Packet Storm

254043	8.8	危険	アップル	-	Apple Safari にて使用される WebKit における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1774	2011-08-11 10:43	2011-07-21	Show	GitHub Exploit DB Packet Storm

254044	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1462	2011-08-11 10:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

254045	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1457	2011-08-11 10:41	2011-07-21	Show	GitHub Exploit DB Packet Storm

254046	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1453	2011-08-11 10:41	2011-07-21	Show	GitHub Exploit DB Packet Storm

254047	7.5	危険	アップル Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1451	2011-08-11 10:40	2011-04-27	Show	GitHub Exploit DB Packet Storm

254048	7.5	危険	アップル Google	-	Google Chrome の WebSockets の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1449	2011-08-11 10:38	2011-04-27	Show	GitHub Exploit DB Packet Storm

254049	7.5	危険	アップル Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1296	2011-08-11 10:37	2011-03-24	Show	GitHub Exploit DB Packet Storm

254050	7.5	危険	アップル Google	-	Google Chrome および Apple Safari にて使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1295	2011-08-11 10:37	2011-03-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220321	6.5	MEDIUM Network	property_rental_software_project	property_rental_software	PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory.	CWE-200 Information Exposure	CVE-2019-7429	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220322	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter.	CWE-79 Cross-site Scripting	CVE-2019-7425	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220323	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTim…	CWE-79 Cross-site Scripting	CVE-2019-7424	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220324	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter.	CWE-79 Cross-site Scripting	CVE-2019-7423	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220325	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter.	CWE-79 Cross-site Scripting	CVE-2019-7422	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220326	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.	CWE-79 Cross-site Scripting	CVE-2019-7421	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220327	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.	CWE-79 Cross-site Scripting	CVE-2019-7420	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220328	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.	CWE-79 Cross-site Scripting	CVE-2019-7419	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220329	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc.	CWE-79 Cross-site Scripting	CVE-2019-7418	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220330	6.1	MEDIUM Network	ericsson	active_library_explorer	XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.	CWE-79 Cross-site Scripting	CVE-2019-7417	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed