Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219801	6.4	警告	Huawei	-	Huawei E355 にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2968	2014-07-25 16:16	2014-07-21	Show	GitHub Exploit DB Packet Storm

219802	-	-	BulletProof Software	-	削除 BulletProof FTP Client 2010 にスタックバッファオーバーフローの脆弱性	-	CVE-2014-2973	2014-07-25 15:48	2014-07-24	Show	GitHub Exploit DB Packet Storm

219803	6.1	警告	シスコシステムズ	-	Cisco ASR 9000 デバイス上で稼動する Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-3322	2014-07-25 14:49	2014-07-23	Show	GitHub Exploit DB Packet Storm

219804	6.9	警告	Canonical	-	acpi-support の policy-funcs の power policy 関数における権限を取得される脆弱性	CWE-362 競合状態	CVE-2014-1419	2014-07-25 14:48	2014-07-22	Show	GitHub Exploit DB Packet Storm

219805	7.8	危険	OleumTech	-	OleumTech WIO DH2 Wireless Gateway および Sensor Wireless I/O Module における暗号保護メカニズムを破られる脆弱性	CWE-Other その他	CVE-2014-2362	2014-07-25 14:33	2014-07-21	Show	GitHub Exploit DB Packet Storm

219806	7.2	危険	OleumTech	-	OleumTech WIO DH2 Wireless Gateway および Sensor Wireless I/O Module における通信を偽装される脆弱性	CWE-Other その他	CVE-2014-2361	2014-07-25 14:33	2014-07-21	Show	GitHub Exploit DB Packet Storm

219807	7.5	危険	OleumTech	-	OleumTech WIO DH2 Wireless Gateway および Sensor Wireless I/O Module における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2014-2360	2014-07-25 14:32	2014-07-21	Show	GitHub Exploit DB Packet Storm

219808	3.5	注意	オムロン株式会社	-	Omron NS シリーズの HMI ターミナルの Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2370	2014-07-25 12:44	2014-07-22	Show	GitHub Exploit DB Packet Storm

219809	6	警告	オムロン株式会社	-	Omron NS シリーズの HMI ターミナルの Web アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-2369	2014-07-25 12:44	2014-07-22	Show	GitHub Exploit DB Packet Storm

219810	8.5	危険	Canary Labs	-	TrendLink の ActiveX コントロールにおける任意のプログラムが実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3022	2014-07-25 12:10	2013-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295371	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.	CWE-255 Credentials Management	CVE-2013-3615	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295372	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.	CWE-287 Improper Authentication	CVE-2013-3613	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295373	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-3614	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295374	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via autho…	CWE-255 Credentials Management	CVE-2013-3612	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295375	-	cisco	digital_media_manager	Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vector…	CWE-20 Improper Input Validation	CVE-2013-3446	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295376	-	adobe	flash_player air air_sdk	Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Andro…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3363	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295377	-	adobe	flash_player air air_sdk	Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Andro…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3362	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295378	-	adobe	flash_player air air_sdk	Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Andro…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3361	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295379	-	adobe	shockwave_player	Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3360	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295380	-	adobe	shockwave_player	Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3359	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed