Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251421	5	警告	mhonarc	-	MHonArc におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1677	2012-03-27 18:42	2011-01-3	Show	GitHub Exploit DB Packet Storm

251422	5.5	警告	レッドハット	-	RHN Satellite におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1171	2012-03-27 18:42	2011-04-11	Show	GitHub Exploit DB Packet Storm

251423	5.8	警告	zeacom	-	Zeacom Chat Server におけるセッションをハイジャックされるの脆弱性	CWE-310 暗号の問題	CVE-2010-0217	2012-03-27 18:42	2011-05-20	Show	GitHub Exploit DB Packet Storm

251424	5	警告	inventivetec	-	MediaCAST の authenticate_ad_setup_finished.cfm におけるユーザ名および平文のパスワードを発見される脆弱性	CWE-310 暗号の問題	CVE-2010-0216	2012-03-27 18:42	2011-05-10	Show	GitHub Exploit DB Packet Storm

251425	7.5	危険	シマンテック	-	Symantec Web Gateway の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0115	2012-03-27 18:42	2011-01-12	Show	GitHub Exploit DB Packet Storm

251426	7.1	危険	ヒューレット・パッカード	-	Palm Pre WebOS における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-5097	2012-03-27 18:42	2011-09-13	Show	GitHub Exploit DB Packet Storm

251427	6.8	警告	ea-style	-	gBook の index_inc.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-5095	2012-03-27 18:42	2011-09-12	Show	GitHub Exploit DB Packet Storm

251428	7.5	危険	cmsfaethon	-	CMS Faethon の info.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-5094	2012-03-27 18:42	2011-09-12	Show	GitHub Exploit DB Packet Storm

251429	5	警告	php4scripte	-	Gastebuch の gastbuch.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-5093	2012-03-27 18:42	2011-09-12	Show	GitHub Exploit DB Packet Storm

251430	7.5	危険	vlinks	-	Vlinks の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-5091	2012-03-27 18:42	2011-09-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
282981	7.5	HIGH Network	twistedmatrix	twisted	Python Twisted 14.0 trustRoot is not respected in HTTP client	CWE-295 Improper Certificate Validation	CVE-2014-7143	2024-11-21 11:16	2019-11-12	Show	GitHub Exploit DB Packet Storm

282982	8.8	HIGH Network	openmicroscopy	omero	OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.	CWE-352 Origin Validation Error	CVE-2014-7198	2024-11-21 11:16	2019-04-1	Show	GitHub Exploit DB Packet Storm

282983	7.8	HIGH Local	sddm_project fedoraproject	sddm fedora	Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may h…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-7272	2024-11-21 11:16	2018-03-9	Show	GitHub Exploit DB Packet Storm

282984	7.8	HIGH Local	sddm_project fedoraproject	sddm fedora	Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2014-7271	2024-11-21 11:16	2018-03-9	Show	GitHub Exploit DB Packet Storm

282985	6.5	MEDIUM Network	teamspeak	teamspeak3	Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, …	CWE-20 Improper Input Validation	CVE-2014-7222	2024-11-21 11:16	2018-01-9	Show	GitHub Exploit DB Packet Storm

282986	6.5	MEDIUM Network	teamspeak	teamspeak3	TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance,…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-7221	2024-11-21 11:16	2018-01-9	Show	GitHub Exploit DB Packet Storm

282987	5.9	MEDIUM Network	ms-ins	sumaho sumaho_driving_capability_diagnosis	The SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability" diagnosis result transmission application 1.2.2 and earlier for Android allow man-in-the-middle attackers to s…	CWE-295 Improper Certificate Validation	CVE-2014-7242	2024-11-21 11:16	2017-10-18	Show	GitHub Exploit DB Packet Storm

282988	6.1	MEDIUM Network	formget	easy_contact_form_solution	Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a …	CWE-79 Cross-site Scripting	CVE-2014-7240	2024-11-21 11:16	2017-10-6	Show	GitHub Exploit DB Packet Storm

282989	9.8	CRITICAL Network	kankunit	konke_smart_plug_firmware	The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP traffic to port 23.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-7279	2024-11-21 11:16	2017-03-24	Show	GitHub Exploit DB Packet Storm

282990	6.1	MEDIUM Network	nex-forms_lite_project	nex-forms_lite	Multiple cross-site scripting (XSS) vulnerabilities in the NEX-Forms Lite plugin 2.1.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the form_fields parameter in a (…	CWE-79 Cross-site Scripting	CVE-2014-7151	2024-11-21 11:16	2016-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed