Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253081 2.6 注意 富士通九州システムズ - e-Pares におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2151 2010-06-2 15:04 2010-06-2 Show GitHub Exploit DB Packet Storm
253082 4.3 警告 富士通九州システムズ - e-Pares におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2150 2010-06-2 15:02 2010-06-2 Show GitHub Exploit DB Packet Storm
253083 2.1 注意 アドビシステムズ - Adobe ColdFusion における重要な情報を取得される脆弱性 CWE-200
CWE-noinfo
CVE-2010-1294 2010-06-2 12:14 2010-05-11 Show GitHub Exploit DB Packet Storm
253084 4.3 警告 アドビシステムズ - Adobe ColdFusion の Administrator ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1293 2010-06-2 12:14 2010-05-11 Show GitHub Exploit DB Packet Storm
253085 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3467 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253086 9.3 危険 アドビシステムズ - Adobe Shockwave Player の pami RIFF chunk 構文解析における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1292 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253087 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1291 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253088 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1290 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
253089 9.3 危険 ジャストシステム - 一太郎シリーズにおける任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2152 2010-06-1 16:01 2010-06-1 Show GitHub Exploit DB Packet Storm
253090 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1289 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286151 8.4 HIGH
Local 		kde paste_applet The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass… CWE-287
Improper Authentication 		CVE-2013-2120 2024-11-21 10:51 2020-02-12 Show GitHub Exploit DB Packet Storm
286152 8.8 HIGH
Network 		undolog wp_cleanfix WordPress plugin wp-cleanfix has Remote Code Execution CWE-352
 Origin Validation Error 		CVE-2013-2109 2024-11-21 10:51 2020-02-11 Show GitHub Exploit DB Packet Storm
286153 5.4 MEDIUM
Network 		undolog cleanfix WordPress WP Cleanfix Plugin 2.4.4 has CSRF CWE-352
 Origin Validation Error 		CVE-2013-2108 2024-11-21 10:51 2020-02-11 Show GitHub Exploit DB Packet Storm
286154 6.1 MEDIUM
Network 		viewgit_project viewgit Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a (1) tag name to the Shortlog table in templates/… CWE-79
Cross-site Scripting 		CVE-2013-2294 2024-11-21 10:51 2020-01-31 Show GitHub Exploit DB Packet Storm
286155 9.8 CRITICAL
Network 		login_security_project login_security The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass intended restrictions via a crafted username. CWE-863
 Incorrect Authorization 		CVE-2013-2198 2024-11-21 10:51 2020-01-31 Show GitHub Exploit DB Packet Storm
286156 7.5 HIGH
Network 		foscam fi8620_firmware An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information. CWE-863
 Incorrect Authorization 		CVE-2013-2574 2024-11-21 10:51 2020-01-30 Show GitHub Exploit DB Packet Storm
286157 9.8 CRITICAL
Network 		tp-link tl-sc_3130g_firmware
tl-sc_3171g_firmware
tl-sc_4171g_firmware 		A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a ma… CWE-78
OS Command  		CVE-2013-2573 2024-11-21 10:51 2020-01-30 Show GitHub Exploit DB Packet Storm
286158 7.5 HIGH
Network 		tp-link tl-sc_3130_firmware
tl-sc_3130g_firmware
tl-sc_3171g_firmware
tl-sc_4171g_firmware 		A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, whic… CWE-798
 Use of Hard-coded Credentials 		CVE-2013-2572 2024-11-21 10:51 2020-01-30 Show GitHub Exploit DB Packet Storm
286159 9.8 CRITICAL
Network 		zavio f3105_firmware
f312a_firmware 		A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remov… CWE-78
OS Command  		CVE-2013-2570 2024-11-21 10:51 2020-01-30 Show GitHub Exploit DB Packet Storm
286160 7.5 HIGH
Network 		zavio f3105_firmware
f312a_firmware 		A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access t… CWE-287
Improper Authentication 		CVE-2013-2569 2024-11-21 10:51 2020-01-30 Show GitHub Exploit DB Packet Storm