Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252071 7.2 危険 マイクロソフト - Microsoft Windows XP の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0673 2011-05-9 11:56 2011-04-12 Show GitHub Exploit DB Packet Storm
252072 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1242 2011-05-9 11:55 2011-04-12 Show GitHub Exploit DB Packet Storm
252073 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1241 2011-05-9 11:53 2011-04-12 Show GitHub Exploit DB Packet Storm
252074 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1240 2011-05-9 11:52 2011-04-12 Show GitHub Exploit DB Packet Storm
252075 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1239 2011-05-9 11:51 2011-04-12 Show GitHub Exploit DB Packet Storm
252076 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1238 2011-05-9 11:50 2011-04-12 Show GitHub Exploit DB Packet Storm
252077 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1237 2011-05-9 11:49 2011-04-12 Show GitHub Exploit DB Packet Storm
252078 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1236 2011-05-9 11:48 2011-04-12 Show GitHub Exploit DB Packet Storm
252079 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1235 2011-05-9 11:46 2011-04-12 Show GitHub Exploit DB Packet Storm
252080 6.8 警告 freedesktop.org
サイバートラスト株式会社
foolabs
OpenOffice.org Project
レッドハット		 - xpdf および poppler などの製品で利用される PDF パーサの FoFiType1::parse 関数における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3704 2011-05-9 11:29 2010-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287511 - asus rt-n10e_firmware
rt-n10e 		qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers to discover the administrator password via a direct request. CWE-287
Improper Authentication 		CVE-2013-3610 2024-11-21 10:53 2013-10-5 Show GitHub Exploit DB Packet Storm
287512 - axis media_control_activex_control The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote attackers to create or overwrite arbitrary files via a file path to the (1) Sta… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3543 2024-11-21 10:53 2013-10-5 Show GitHub Exploit DB Packet Storm
287513 - ovislink airlive_wl2600cam Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. (dot dot) in the READ.filePa… CWE-22
Path Traversal 		CVE-2013-3541 2024-11-21 10:53 2013-10-5 Show GitHub Exploit DB Packet Storm
287514 - ovislink airlive_od-2025hd
airlive_poe100hd
airlive_od-2060hd
airlive_poe250hd
airlive_poe200hd
airlive_poe2600hd 		Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows… CWE-352
 Origin Validation Error 		CVE-2013-3540 2024-11-21 10:53 2013-10-5 Show GitHub Exploit DB Packet Storm
287515 - corel pdf_fusion Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a director… NVD-CWE-Other
CVE-2013-3248 2024-11-21 10:53 2013-10-4 Show GitHub Exploit DB Packet Storm
287516 - baramundi management_suite Baramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and (2) data storage, which allows remote attackers to obtain sensitive information by sniffing the netwo… CWE-310
Cryptographic Issues 		CVE-2013-3593 2024-11-21 10:53 2013-10-3 Show GitHub Exploit DB Packet Storm
287517 - sony
ovislink 		snc_dh280
snc_dh140t
snc_dh140
snc_dh180
snc_ch240
snc_ch180
snc_ch280
snc_dh240
snc_dh240t
snc_ch140
airlive_wl2600cam 		Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and pos… CWE-352
 Origin Validation Error 		CVE-2013-3539 2024-11-21 10:53 2013-10-2 Show GitHub Exploit DB Packet Storm
287518 - emc vplex_geo
vplex_metro
vplex_local
geosynchrony 		EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configur… CWE-255
Credentials Management 		CVE-2013-3278 2024-11-21 10:53 2013-10-1 Show GitHub Exploit DB Packet Storm
287519 - cisco video_surveillance_operations_manager The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a crafted URL, aka Bug… CWE-287
Improper Authentication 		CVE-2013-3417 2024-11-21 10:53 2013-10-1 Show GitHub Exploit DB Packet Storm
287520 - knowledgeview knowledgeview_editorial_and_management_application Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attackers to inject arbitrary web script or HTML via the username parameter. CWE-79
Cross-site Scripting 		CVE-2013-3616 2024-11-21 10:53 2013-09-24 Show GitHub Exploit DB Packet Storm