Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251411	5	警告	Alex Kellner TYPO3 Association	-	TYPO3 の powermail extension における検証を回避される脆弱性	CWE-noinfo 情報不足	CVE-2010-3687	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251412	2.1	注意	Synology Inc.	-	Synology Disk Station の FTP 認証モジュールにおける重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3684	2012-03-27 18:42	2010-09-29	Show	GitHub Exploit DB Packet Storm

251413	7.5	危険	wire plastic design	-	wpQuiz における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3608	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

251414	4.3	警告	NetArt Media	-	NetArt MEDIA Real Estate Portal の AGENTS/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3607	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

251415	6.8	警告	NetArt Media	-	NetArt MEDIA Real Estate Portal の AGENTS/index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3606	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

251416	4.3	警告	Alex Kellner TYPO3 Association	-	TYPO3 の powermail extension におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3605	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251417	7.5	危険	Alex Kellner TYPO3 Association	-	TYPO3 の powermail extension における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3604	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251418	6.8	警告	i7MEDIA, LLC	-	mojoPortal のファイルマネージャサービスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3603	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

251419	4.3	警告	i7MEDIA, LLC	-	mojoPortal の ProfileView.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3602	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

251420	7.5	危険	Invision Power Services, Inc	-	ibPhotohost の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3601	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265641	8.8	HIGH Network	moxa	awk-3131a_firmware	An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a …	CWE-352 Origin Validation Error	CVE-2016-8718	2024-11-21 11:59	2017-04-13	Show	GitHub Exploit DB Packet Storm

265642	7.5	HIGH Adjacent	moxa	awk-3131a_firmware	An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functiona…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2016-8716	2024-11-21 11:59	2017-04-13	Show	GitHub Exploit DB Packet Storm

265643	8.1	HIGH Network	lenovo	updates	Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8237	2024-11-21 11:59	2017-04-11	Show	GitHub Exploit DB Packet Storm

265644	7.8	HIGH Local	lenovo	customer_care_software_development_kit	Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8235	2024-11-21 11:59	2017-04-11	Show	GitHub Exploit DB Packet Storm

265645	7.5	HIGH Adjacent	huawei	oceanstor_5600_v3_firmware	Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may …	CWE-798 Use of Hard-coded Credentials	CVE-2016-8754	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

265646	6.5	MEDIUM Network	huawei	anyoffice	Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.	CWE-20 Improper Input Validation	CVE-2016-8275	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

265647	7.8	HIGH Local	huawei	hisuite	Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.	CWE-284 Improper Access Control	CVE-2016-8274	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

265648	7.8	HIGH Local	huawei	hisuite	Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can la…	CWE-20 CWE-284 Improper Input Validation Improper Access Control	CVE-2016-8273	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

265649	5.3	MEDIUM Local	huawei	hisuite	Huawei PC client software HiSuite 4.0.5.300_OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks.	CWE-200 Information Exposure	CVE-2016-8272	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

265650	5.3	MEDIUM Network	huawei	espace_iad_firmware	Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL.	CWE-200 Information Exposure	CVE-2016-8271	2024-11-21 11:59	2017-04-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed