Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255261	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-1969	2011-10-21 15:31	2011-10-11	Show	GitHub Exploit DB Packet Storm

255262	4.3	警告	マイクロソフト	-	Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1897	2011-10-21 15:30	2011-10-11	Show	GitHub Exploit DB Packet Storm

255263	4.3	警告	マイクロソフト	-	Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1896	2011-10-21 15:30	2011-10-11	Show	GitHub Exploit DB Packet Storm

255264	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-1895	2011-10-21 15:28	2011-10-11	Show	GitHub Exploit DB Packet Storm

255265	9.3	危険	マイクロソフト	-	Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1253	2011-10-21 15:27	2011-10-11	Show	GitHub Exploit DB Packet Storm

255266	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2011	2011-10-21 15:26	2011-10-11	Show	GitHub Exploit DB Packet Storm

255267	9.3	危険	マイクロソフト	-	Microsoft Windows の win32k.sys のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2003	2011-10-21 15:25	2011-10-11	Show	GitHub Exploit DB Packet Storm

255268	4.7	警告	マイクロソフト	-	Microsoft Windows の win32k.sys におけるサービス運用妨害 (システムハング) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2002	2011-10-21 15:25	2011-10-11	Show	GitHub Exploit DB Packet Storm

255269	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格またはサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-1985	2011-10-21 15:24	2011-10-11	Show	GitHub Exploit DB Packet Storm

255270	9.3	危険	マイクロソフト	-	Microsoft Windows Vista および Windows 7 の Windows Media Center における権限昇格の脆弱性	CWE-Other その他	CVE-2011-2009	2011-10-21 15:24	2011-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223631	5.5	MEDIUM Local	avaya	one-x_communicator	Avaya one-X Communicator uses weak cryptographic algorithms in the client authentication component that could allow a local attacker to decrypt sensitive information. Affected versions include all 6.…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-7006	2024-11-21 13:47	2019-02-27	Show	GitHub Exploit DB Packet Storm

223632	9.8	CRITICAL Network	sqlalchemy debian opensuse redhat oracle	sqlalchemy debian_linux leap backports_sle enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux communications_operations_monitor	SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.	CWE-89 SQL Injection	CVE-2019-7164	2024-11-21 13:47	2019-02-20	Show	GitHub Exploit DB Packet Storm

223633	8.1	HIGH Network	linux debian canonical f5 redhat	linux_kernel debian_linux ubuntu_linux big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy…	In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.	CWE-362 CWE-416 Race Condition Use After Free	CVE-2019-6974	2024-11-21 13:47	2019-02-16	Show	GitHub Exploit DB Packet Storm

223634	7.5	HIGH Network	djangoproject canonical fedoraproject	django ubuntu_linux fedora	Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() func…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-6975	2024-11-21 13:47	2019-02-11	Show	GitHub Exploit DB Packet Storm

223635	9.8	CRITICAL Network	css-tricks	chat2	An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.	CWE-89 SQL Injection	CVE-2019-7316	2024-11-21 13:47	2019-02-4	Show	GitHub Exploit DB Packet Storm

223636	9.8	CRITICAL Network	live555 debian	streaming_media debian_linux	liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server…	CWE-416 Use After Free	CVE-2019-7314	2024-11-21 13:47	2019-02-4	Show	GitHub Exploit DB Packet Storm

223637	6.1	MEDIUM Network	buildbot	buildbot	www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.	CWE-93 CRLF Injection	CVE-2019-7313	2024-11-21 13:47	2019-02-3	Show	GitHub Exploit DB Packet Storm

223638	5.3	MEDIUM Network	primx	zed zedmail zonecentral	Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0…	CWE-200 Information Exposure	CVE-2019-7312	2024-11-21 13:47	2019-02-3	Show	GitHub Exploit DB Packet Storm

223639	7.8	HIGH Local	freedesktop canonical debian fedoraproject redhat	poppler ubuntu_linux debian_linux fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux enterprise_linux_eus enterprise_linu…	In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash…	CWE-125 CWE-681 Out-of-bounds Read Incorrect Conversion between Numeric Types	CVE-2019-7310	2024-11-21 13:47	2019-02-3	Show	GitHub Exploit DB Packet Storm

223640	5.5	MEDIUM Local	gnu	glibc	In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significan…	NVD-CWE-noinfo	CVE-2019-7309	2024-11-21 13:47	2019-02-3	Show	GitHub Exploit DB Packet Storm