Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258461	4.3	警告	アップル	-	Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性	CWE-Other その他	CVE-2009-1723	2010-07-13 16:25	2009-08-5	Show	GitHub Exploit DB Packet Storm

258462	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1382	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

258463	3.5	注意	アップル	-	Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性	CWE-16 環境設定	CVE-2010-1381	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

258464	7.5	危険	アップル	-	Apple Mac OS X の cgtexttops CUPS フィルタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1380	2010-07-12 18:11	2010-06-15	Show	GitHub Exploit DB Packet Storm

258465	5	警告	アップル	-	Apple Mac OS X のプリンタ設定におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1379	2010-07-12 18:11	2010-06-15	Show	GitHub Exploit DB Packet Storm

258466	5	警告	IBM	-	IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 CWE-noinfo	CVE-2010-0775	2010-07-12 16:43	2010-05-8	Show	GitHub Exploit DB Packet Storm

258467	4.3	警告	IBM	-	IBM WebSphere Application Server におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0774	2010-07-12 16:43	2010-05-8	Show	GitHub Exploit DB Packet Storm

258468	5	警告	アップルサイバートラスト株式会社レッドハットターボリナックス CUPS	-	CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3553	2010-07-12 16:41	2009-11-20	Show	GitHub Exploit DB Packet Storm

258469	9.3	危険	アップル	-	Apple Mac OS X の Open Directory における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1377	2010-07-9 16:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

258470	6.8	警告	アップル	-	Apple Mac OS X のネットワーク認証における任意のコードを実行される脆弱性	CWE-134 書式文字列の問題	CVE-2010-1376	2010-07-9 16:25	2010-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222501	6.1	MEDIUM Network	digitaldruid	hoteldruid	HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php.	CWE-79 Cross-site Scripting	CVE-2019-8937	2024-11-21 13:50	2019-05-18	Show	GitHub Exploit DB Packet Storm

222502	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file in these GET parameters: param and rtype.	CWE-79 Cross-site Scripting	CVE-2019-8929	2024-11-21 13:50	2019-05-18	Show	GitHub Exploit DB Packet Storm

222503	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET parameters: authMeth, passWord, pwd1, and userNam…	CWE-79 Cross-site Scripting	CVE-2019-8928	2024-11-21 13:50	2019-05-18	Show	GitHub Exploit DB Packet Storm

222504	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp file via these GET parameters: devSrc, emai…	CWE-79 Cross-site Scripting	CVE-2019-8927	2024-11-21 13:50	2019-05-18	Show	GitHub Exploit DB Packet Storm

222505	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev…	CWE-79 Cross-site Scripting	CVE-2019-8926	2024-11-21 13:50	2019-05-17	Show	GitHub Exploit DB Packet Storm

222506	4.3	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet (via the…	CWE-22 Path Traversal	CVE-2019-8925	2024-11-21 13:50	2019-05-17	Show	GitHub Exploit DB Packet Storm

222507	6.1	MEDIUM Network	apachefriends	xampp	XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued.	CWE-79 Cross-site Scripting	CVE-2019-8924	2024-11-21 13:50	2019-05-17	Show	GitHub Exploit DB Packet Storm

222508	7.5	HIGH Network	netapp fedoraproject opensuse hpe ntp	data_ontap clustered_data_ontap fedora leap hpux-ntp ntp	NTP through 4.2.8p12 has a NULL Pointer Dereference.	CWE-476 NULL Pointer Dereference	CVE-2019-8936	2024-11-21 13:50	2019-05-16	Show	GitHub Exploit DB Packet Storm

222509	9.8	CRITICAL Network	apachefriends	xampp	XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued.	CWE-89 SQL Injection	CVE-2019-8923	2024-11-21 13:50	2019-05-15	Show	GitHub Exploit DB Packet Storm

222510	8.1	HIGH Network	ellucian	banner_web_tailor banner_enterprise_identity_services	An improper authentication vulnerability can be exploited through a race condition that occurs in Ellucian Banner Web Tailor 8.8.3, 8.8.4, and 8.9 and Banner Enterprise Identity Services 8.3, 8.3.1, …	CWE-287 CWE-362 Improper Authentication Race Condition	CVE-2019-8978	2024-11-21 13:50	2019-05-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed