Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252161 5 警告 Cogent Real-Time Systems Inc. - Cogent DataHub の Web サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3500 2012-02-3 16:51 2011-09-16 Show GitHub Exploit DB Packet Storm
252162 10 危険 Cogent Real-Time Systems Inc. - Cogent DataHub の DH_OneSecondTick 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3493 2012-02-3 16:49 2011-09-16 Show GitHub Exploit DB Packet Storm
252163 5 警告 Beckhoff Automation - Beckhoff TwinCAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3486 2012-02-3 16:47 2011-09-16 Show GitHub Exploit DB Packet Storm
252164 7.5 危険 Novell - Novell Open Enterprise Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4194 2012-02-3 16:38 2012-01-31 Show GitHub Exploit DB Packet Storm
252165 6.8 警告 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザの最高権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4144 2012-02-3 16:37 2012-02-2 Show GitHub Exploit DB Packet Storm
252166 6.4 警告 The PHP Group - PHP における任意のファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0057 2012-02-3 16:34 2011-04-1 Show GitHub Exploit DB Packet Storm
252167 9.3 危険 ヒューレット・パッカード - HP Network Automation における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4790 2012-02-3 16:30 2012-01-30 Show GitHub Exploit DB Packet Storm
252168 2.1 注意 Mozilla Foundation - Mozilla Firefox および SeaMonkey における Firefox Sync キーを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0450 2012-02-3 16:29 2012-01-31 Show GitHub Exploit DB Packet Storm
252169 5 警告 Mozilla Foundation - 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3670 2012-02-3 16:22 2012-01-31 Show GitHub Exploit DB Packet Storm
252170 7.5 危険 Novell - Novell Open Enterprise Server 2 の GetDriverSettings 関数 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3173 2012-02-3 16:11 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265141 9.8 CRITICAL
Network 		synology ds107_firmware
ds213_firmware
ds116_firmware 		Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A re… CWE-255
Credentials Management 		CVE-2016-6554 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265142 9.8 CRITICAL
Network 		nuuo nt-4040_titan_firmware Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulne… CWE-255
Credentials Management 		CVE-2016-6553 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265143 9.8 CRITICAL
Network 		greenpacket dx-350_firmware Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device. CWE-255
Credentials Management 		CVE-2016-6552 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265144 9.8 CRITICAL
Network 		intelliantech v60_firmware
v60ka_firmware
v65_firmware
v80g_firmware
t80w_firmware
t80q_firmware
t100w_firmware
t100q_firmware
t110w_firmware
t110q_firmware
t130w_firmware
t130q_fi… 		Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access… CWE-255
Credentials Management 		CVE-2016-6551 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265145 4.3 MEDIUM
Adjacent 		nutspace nut_mobile The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute. CWE-287
Improper Authentication 		CVE-2016-6549 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265146 9.8 CRITICAL
Network 		nutspace nut_mobile The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th… CWE-200
Information Exposure 		CVE-2016-6548 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265147 7.8 HIGH
Local 		nutspace nut_mobile The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-6547 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265148 7.8 HIGH
Local 		kkmcn itrackeasy The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl… CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-6546 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265149 9.8 CRITICAL
Network 		ieasytec itrackeasy Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this … CWE-384
 Session Fixation 		CVE-2016-6545 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265150 7.5 HIGH
Network 		ieasytec itrack_easy getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device. CWE-287
Improper Authentication 		CVE-2016-6544 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm