Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252951 5 警告 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット		 - Sun Java SE および OpenJDK の Java Runtime Environment (JRE) における ディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3728 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
252952 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0248 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
252953 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0244 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
252954 9.3 危険 マイクロソフト - Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0027 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
252955 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0247 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
252956 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
252957 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
252958 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
252959 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
252960 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285101 7.8 HIGH
Local 		xnview xnview Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file. CWE-787
 Out-of-bounds Write 		CVE-2013-3247 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
285102 7.8 HIGH
Local 		xnview xnview Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file. CWE-787
 Out-of-bounds Write 		CVE-2013-3246 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
285103 8.1 HIGH
Network 		supermicro
citrix 		smt_x9_firmware
smt_x8_firmware
netscaler_sdx_firmware
netscaler_firmware
netscaler_sd-wan_firmware 		Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 con… CWE-798
 Use of Hard-coded Credentials 		CVE-2013-3619 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
285104 10.0 CRITICAL
Network 		grandstream gxv3501_firmware
gxv3504_firmware
gxv3601_firmware
gxv3601hd_firmware
gxv3601ll_firmware
gxv3611hd_firmware
gxv3611ll_firmware
gxv3615w_firmware
gxv3615p_firmware
gxv3651fh… 		Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded … CWE-798
 Use of Hard-coded Credentials 		CVE-2013-3542 2024-11-21 10:53 2019-12-12 Show GitHub Exploit DB Packet Storm
285105 7.5 HIGH
Network 		loftek nexus_543_firmware The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2) firmware versions (ui and system), timestamp, serial number, p2p port number, … CWE-200
Information Exposure 		CVE-2013-3314 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
285106 7.5 HIGH
Network 		loftek nexus_543_firmware The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi. NOTE: cleartext passwords can a… CWE-522
 Insufficiently Protected Credentials 		CVE-2013-3313 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
285107 8.8 HIGH
Network 		loftek nexus_543_firmware Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) pa… CWE-352
 Origin Validation Error 		CVE-2013-3312 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
285108 7.5 HIGH
Network 		loftek nexus_543_firmware Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. (dot dot) in the URL of an HTTP GET request. CWE-22
Path Traversal 		CVE-2013-3311 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
285109 8.8 HIGH
Network 		trendnet tew-812dru_firmware Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3. CWE-352
 Origin Validation Error 		CVE-2013-3366 2024-11-21 10:53 2019-11-14 Show GitHub Exploit DB Packet Storm
285110 6.1 MEDIUM
Network 		actiontec mi424wr-gen3i_firmware Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router. CWE-79
Cross-site Scripting 		CVE-2013-3097 2024-11-21 10:53 2019-11-14 Show GitHub Exploit DB Packet Storm