Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254071	7.6	危険	シスコシステムズ	-	Linux および Mac OS 上で稼働する Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2040	2011-06-20 11:12	2011-06-1	Show	GitHub Exploit DB Packet Storm

254072	7.6	危険	シスコシステムズ	-	Windows 上で稼働する Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2039	2011-06-20 11:10	2011-06-1	Show	GitHub Exploit DB Packet Storm

254073	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atrpui.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2880	2011-06-17 11:28	2009-12-16	Show	GitHub Exploit DB Packet Storm

254074	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2879	2011-06-17 11:25	2009-12-16	Show	GitHub Exploit DB Packet Storm

254075	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の atas32.dll におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2878	2011-06-17 11:23	2009-12-16	Show	GitHub Exploit DB Packet Storm

254076	9.3	危険	シスコシステムズ	-	Cisco WebEx WRF Player の ataudio.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2877	2011-06-17 11:18	2009-12-16	Show	GitHub Exploit DB Packet Storm

254077	6.3	警告	VMware	-	複数の VMware 製品の HGFS におけるゲスト OS 上の任意のファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2145	2011-06-17 10:59	2011-06-2	Show	GitHub Exploit DB Packet Storm

254078	6.9	警告	VMware	-	複数の VMware 製品の HGFS におけるゲスト OS 上の権限を取得される脆弱性	CWE-362 競合状態	CVE-2011-1787	2011-06-17 10:58	2011-06-2	Show	GitHub Exploit DB Packet Storm

254079	2.1	注意	VMware	-	複数の Vmware 製品の HGFS におけるホスト OS 上のファイルなどの存在有無を特定される脆弱性	CWE-200 情報漏えい	CVE-2011-2146	2011-06-17 10:56	2011-06-2	Show	GitHub Exploit DB Packet Storm

254080	4.3	警告	アドビシステムズレッドハット	-	Adobe Flash Player におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2107	2011-06-17 10:54	2011-06-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225601	6.1	MEDIUM Network	centreon	centreon_web	Local file inclusion in brokerPerformance.php in Centreon Web before 2.8.28 allows attackers to disclose information or perform a stored XSS attack on a user.	CWE-79 Cross-site Scripting	CVE-2019-17108	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225602	8.8	HIGH Network	centreon	centreon_web	minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the command_hostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this…	CWE-78 OS Command	CVE-2019-17107	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225603	6.5	MEDIUM Network	centreon	centreon_web	In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2019-17106	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225604	7.5	HIGH Network	centreon	centreon_vm	In Centreon VM through 19.04.3, the cookie configuration within the Apache HTTP Server does not protect against theft because the HTTPOnly flag is not set.	CWE-565 Reliance on Cookies without Validation and Integrity Checking	CVE-2019-17104	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225605	7.5	HIGH Network	auth0	auth0.net	Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.	CWE-287 Improper Authentication	CVE-2019-16929	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225606	7.8	HIGH Local	xnview	xnview	XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.	CWE-787 Out-of-bounds Write	CVE-2019-17262	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225607	7.8	HIGH Local	xnview	xnview	XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.	CWE-787 Out-of-bounds Write	CVE-2019-17261	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225608	7.8	HIGH Local	mpc-hc	mpc-hc	MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpc_hc!memcpy+0x000000000000004e.	CWE-125 Out-of-bounds Read	CVE-2019-17260	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225609	7.8	HIGH Local	kmplayer	kmplayer	KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!src_new+0x000000000014d6ee.	CWE-787 Out-of-bounds Write	CVE-2019-17259	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

225610	7.8	HIGH Local	irfanview	irfanview	IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x000000000000839c.	CWE-787 Out-of-bounds Write	CVE-2019-17258	2024-11-21 13:31	2019-10-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed