Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202011	6.5	警告 Network	マイクロソフト	-	Microsoft Edge および複数の Microsoft Windows 製品の PDF ライブラリにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3370	2016-09-16 15:40	2016-09-13	Show	GitHub Exploit DB Packet Storm

202012	5.5	警告 Local	マイクロソフト	-	複数の Microsoft Windows 製品の Kernel API における重要なアカウント情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3373	2016-09-16 15:22	2016-09-13	Show	GitHub Exploit DB Packet Storm

202013	6.6	警告 Local	マイクロソフト	-	Microsoft Windows Vista および Windows Server 2008 の Kernel API におけるプロセスを偽装される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3372	2016-09-16 15:22	2016-09-13	Show	GitHub Exploit DB Packet Storm

202014	5.5	警告 Local	マイクロソフト	-	複数の Microsoft Windows 製品の Kernel API における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3371	2016-09-16 15:22	2016-09-13	Show	GitHub Exploit DB Packet Storm

202015	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルにおけるセッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2016-3306	2016-09-16 15:22	2016-09-13	Show	GitHub Exploit DB Packet Storm

202016	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルにおけるセッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2016-3305	2016-09-16 15:22	2016-09-13	Show	GitHub Exploit DB Packet Storm

202017	7.8	重要 Local	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3365	2016-09-16 12:21	2016-09-13	Show	GitHub Exploit DB Packet Storm

202018	7.8	重要 Local	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3362	2016-09-16 12:21	2016-09-13	Show	GitHub Exploit DB Packet Storm

202019	7.8	重要 Local	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3360	2016-09-16 12:21	2016-09-13	Show	GitHub Exploit DB Packet Storm

202020	7.8	重要 Local	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3358	2016-09-16 12:21	2016-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290771	5.5	MEDIUM Local	kde	paste_applet	The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent att…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2013-2213	2024-11-21 10:51	2020-02-12	Show	GitHub Exploit DB Packet Storm

290772	8.4	HIGH Local	kde	paste_applet	The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass…	CWE-287 Improper Authentication	CVE-2013-2120	2024-11-21 10:51	2020-02-12	Show	GitHub Exploit DB Packet Storm

290773	8.8	HIGH Network	undolog	wp_cleanfix	WordPress plugin wp-cleanfix has Remote Code Execution	CWE-352 Origin Validation Error	CVE-2013-2109	2024-11-21 10:51	2020-02-11	Show	GitHub Exploit DB Packet Storm

290774	5.4	MEDIUM Network	undolog	cleanfix	WordPress WP Cleanfix Plugin 2.4.4 has CSRF	CWE-352 Origin Validation Error	CVE-2013-2108	2024-11-21 10:51	2020-02-11	Show	GitHub Exploit DB Packet Storm

290775	6.1	MEDIUM Network	viewgit_project	viewgit	Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a (1) tag name to the Shortlog table in templates/…	CWE-79 Cross-site Scripting	CVE-2013-2294	2024-11-21 10:51	2020-01-31	Show	GitHub Exploit DB Packet Storm

290776	9.8	CRITICAL Network	login_security_project	login_security	The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass intended restrictions via a crafted username.	CWE-863 Incorrect Authorization	CVE-2013-2198	2024-11-21 10:51	2020-01-31	Show	GitHub Exploit DB Packet Storm

290777	7.5	HIGH Network	foscam	fi8620_firmware	An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information.	CWE-863 Incorrect Authorization	CVE-2013-2574	2024-11-21 10:51	2020-01-30	Show	GitHub Exploit DB Packet Storm

290778	9.8	CRITICAL Network	tp-link	tl-sc_3130g_firmware tl-sc_3171g_firmware tl-sc_4171g_firmware	A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a ma…	CWE-78 OS Command	CVE-2013-2573	2024-11-21 10:51	2020-01-30	Show	GitHub Exploit DB Packet Storm

290779	7.5	HIGH Network	tp-link	tl-sc_3130_firmware tl-sc_3130g_firmware tl-sc_3171g_firmware tl-sc_4171g_firmware	A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, whic…	CWE-798 Use of Hard-coded Credentials	CVE-2013-2572	2024-11-21 10:51	2020-01-30	Show	GitHub Exploit DB Packet Storm

290780	9.8	CRITICAL Network	zavio	f3105_firmware f312a_firmware	A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remov…	CWE-78 OS Command	CVE-2013-2570	2024-11-21 10:51	2020-01-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed