Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254071	7.6	危険	シスコシステムズ	-	Windows 上で稼働する Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2039	2011-06-20 11:10	2011-06-1	Show	GitHub Exploit DB Packet Storm

254072	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atrpui.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2880	2011-06-17 11:28	2009-12-16	Show	GitHub Exploit DB Packet Storm

254073	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2879	2011-06-17 11:25	2009-12-16	Show	GitHub Exploit DB Packet Storm

254074	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2878	2011-06-17 11:23	2009-12-16	Show	GitHub Exploit DB Packet Storm

254075	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の ataudio.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2877	2011-06-17 11:18	2009-12-16	Show	GitHub Exploit DB Packet Storm

254076	6.3	警告	VMware	-	複数の VMware 製品の HGFS におけるゲスト OS 上の任意のファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2145	2011-06-17 10:59	2011-06-2	Show	GitHub Exploit DB Packet Storm

254077	6.9	警告	VMware	-	複数の VMware 製品の HGFS におけるゲスト OS 上の権限を取得される脆弱性	CWE-362 競合状態	CVE-2011-1787	2011-06-17 10:58	2011-06-2	Show	GitHub Exploit DB Packet Storm

254078	2.1	注意	VMware	-	複数の Vmware 製品の HGFS におけるホスト OS 上のファイルなどの存在有無を特定される脆弱性	CWE-200 情報漏えい	CVE-2011-2146	2011-06-17 10:56	2011-06-2	Show	GitHub Exploit DB Packet Storm

254079	4.3	警告	アドビシステムズレッドハット	-	Adobe Flash Player におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2107	2011-06-17 10:54	2011-06-5	Show	GitHub Exploit DB Packet Storm

254080	-	-	Rockwell Automation	-	RSLinx Classic EDS Hardware Installation Tool にバッファオーバーフローの脆弱性	-	-	2011-06-17 10:51	2011-05-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225451	5.5	MEDIUM Local	axiosys	bento4	Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from the AP4_TrunAtom class.	CWE-476 NULL Pointer Dereference	CVE-2019-16349	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225452	6.5	MEDIUM Network	libwav_project	libwav	marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c.	CWE-476 NULL Pointer Dereference	CVE-2019-16348	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225453	8.8	HIGH Network	miniupnp_project	ngiflib	ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.	CWE-787 CWE-682 Out-of-bounds Write Incorrect Calculation	CVE-2019-16347	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225454	8.8	HIGH Network	miniupnp_project	ngiflib	ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.	CWE-787 CWE-682 Out-of-bounds Write Incorrect Calculation	CVE-2019-16346	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225455	9.8	CRITICAL Network	egpp	sistema_integrado_de_gestion_academica	In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attack…	CWE-89 SQL Injection	CVE-2019-16264	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225456	6.1	MEDIUM Network	dolibarr	dolibarr_erp\/crm	In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.	CWE-79 Cross-site Scripting	CVE-2019-16197	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225457	7.1	HIGH Network	gitlab	gitlab	An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-16170	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225458	9.8	CRITICAL Network	fasterxml fedoraproject debian netapp redhat oracle	jackson-databind fedora debian_linux steelstore_cloud_integrated_storage oncommand_workflow_automation oncommand_api_services jboss_enterprise_application_platform retail_xstore_…	A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.	CWE-502 Deserialization of Untrusted Data	CVE-2019-16335	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225459	4.8	MEDIUM Network	bludit	bludit	In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field. NOTE: this may overlap CVE-2017-16636.	CWE-79 Cross-site Scripting	CVE-2019-16334	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

225460	5.4	MEDIUM Network	get-simple	getsimple_cms	GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php.	CWE-79 Cross-site Scripting	CVE-2019-16333	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed