Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254631	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングに対する保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2768	2011-05-17 09:00	2010-09-7	Show	GitHub Exploit DB Packet Storm

254632	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2764	2011-05-17 08:59	2010-09-7	Show	GitHub Exploit DB Packet Storm

254633	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla 製品の SafeJSObjectWrapper 実装におけるクローム特権で任意の JavaScript コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2762	2011-05-17 08:56	2010-09-7	Show	GitHub Exploit DB Packet Storm

254634	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3169	2011-05-17 08:55	2010-09-7	Show	GitHub Exploit DB Packet Storm

254635	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3168	2011-05-17 08:53	2010-09-7	Show	GitHub Exploit DB Packet Storm

254636	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTreeContentView 関数における任意のコードを実行される脆弱性	CWE-119 CWE-399	CVE-2010-3167	2011-05-17 08:52	2010-09-7	Show	GitHub Exploit DB Packet Storm

254637	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTextFrameUtils::TransformText 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3166	2011-05-17 08:50	2010-09-7	Show	GitHub Exploit DB Packet Storm

254638	4	警告	オラクル	-	OpenSSO Enterprise および Sun Java System Access Manager における脆弱性	CWE-noinfo 情報不足	CVE-2011-0847	2011-05-16 11:38	2011-04-19	Show	GitHub Exploit DB Packet Storm

254639	5	警告	オラクル	-	Oracle Sun Java System Access Manager Policy Agent における脆弱性	CWE-noinfo 情報不足	CVE-2011-0846	2011-05-16 11:37	2011-04-19	Show	GitHub Exploit DB Packet Storm

254640	4.3	警告	オラクル	-	OpenSSO Enterprise および Sun Java System Access Manager における脆弱性	CWE-noinfo 情報不足	CVE-2011-0844	2011-05-16 11:36	2011-04-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225401	7.8	HIGH Local	cisco	nx-os	A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker to gai…	CWE-20 Improper Input Validation	CVE-2019-1592	2024-11-21 13:36	2019-05-4	Show	GitHub Exploit DB Packet Storm

225402	8.1	HIGH Network	cisco	nx-os	A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unau…	CWE-295 Improper Certificate Validation	CVE-2019-1590	2024-11-21 13:36	2019-05-4	Show	GitHub Exploit DB Packet Storm

225403	4.6	MEDIUM Physics	cisco	nx-os	A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthentica…	CWE-311 Missing Encryption of Sensitive Data	CVE-2019-1589	2024-11-21 13:36	2019-05-4	Show	GitHub Exploit DB Packet Storm

225404	4.3	MEDIUM Network	cisco	nx-os	A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, remote attacker to access sensitive information. The vulnerab…	CWE-20 Improper Input Validation	CVE-2019-1587	2024-11-21 13:36	2019-05-4	Show	GitHub Exploit DB Packet Storm

225405	4.6	MEDIUM Physics	cisco	application_policy_infrastructure_controller	A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affec…	CWE-459 Incomplete Cleanup	CVE-2019-1586	2024-11-21 13:36	2019-05-4	Show	GitHub Exploit DB Packet Storm

225406	5.4	MEDIUM Network	paloaltonetworks	expedition_migration_tool	Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.	CWE-79 Cross-site Scripting	CVE-2019-1574	2024-11-21 13:36	2019-04-13	Show	GitHub Exploit DB Packet Storm

225407	2.5	LOW Local	paloaltonetworks	globalprotect	GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to …	CWE-311 Missing Encryption of Sensitive Data	CVE-2019-1573	2024-11-21 13:36	2019-04-10	Show	GitHub Exploit DB Packet Storm

225408	5.4	MEDIUM Network	paloaltonetworks	expedition_migration_tool	The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings.	CWE-79 Cross-site Scripting	CVE-2019-1567	2024-11-21 13:36	2019-04-10	Show	GitHub Exploit DB Packet Storm

225409	4.8	MEDIUM Network	paloaltonetworks	expedition	The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.	CWE-79 Cross-site Scripting	CVE-2019-1571	2024-11-21 13:36	2019-03-27	Show	GitHub Exploit DB Packet Storm

225410	7.5	HIGH Network	paloaltonetworks	pan-os	PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.	NVD-CWE-noinfo	CVE-2019-1572	2024-11-21 13:36	2019-03-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed