Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253111	7.5	危険	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-2315	2010-01-19 15:48	2008-08-1	Show	GitHub Exploit DB Packet Storm

253112	7.5	危険	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の zlib 拡張モジュールにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2008-1721	2010-01-19 15:48	2008-04-10	Show	GitHub Exploit DB Packet Storm

253113	6.8	警告	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の imageop.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-1679	2010-01-19 15:48	2008-04-22	Show	GitHub Exploit DB Packet Storm

253114	5.8	警告	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の imageop モジュールにおける複数の整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2007-4965	2010-01-19 15:47	2007-09-18	Show	GitHub Exploit DB Packet Storm

253115	7.5	危険	アップル	-	Mac OS X 用の Java における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2009-2843	2010-01-18 12:22	2009-12-3	Show	GitHub Exploit DB Packet Storm

253116	6.8	警告	アップル GNU Project サン・マイクロシステムズサイバートラスト株式会社レッドハット	-	GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-4131	2010-01-18 12:21	2007-08-23	Show	GitHub Exploit DB Packet Storm

253117	4.6	警告	IBM	-	IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4150	2010-01-15 14:10	2009-12-2	Show	GitHub Exploit DB Packet Storm

253118	2.1	注意	サン・マイクロシステムズ	-	Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4080	2010-01-15 14:10	2009-11-24	Show	GitHub Exploit DB Packet Storm

253119	5	警告	サン・マイクロシステムズ	-	Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4075	2010-01-15 14:09	2009-11-23	Show	GitHub Exploit DB Packet Storm

253120	2.6	注意	オラクル	-	Oracle Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-01-14 15:01	2010-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252021	7.8	HIGH Local	dlink	dir-850l_firmware	D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0644 /var/etc/shadow (aka the /etc/shadow symlink target) permissions.	CWE-798 Use of Hard-coded Credentials	CVE-2017-14426	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252022	7.8	HIGH Local	dlink	dir-850l_firmware	D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/etc/hnapasswd permissions.	CWE-276 Incorrect Default Permissions	CVE-2017-14425	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252023	7.8	HIGH Local	dlink	dir-850l_firmware	D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/passwd permissions.	CWE-276 Incorrect Default Permissions	CVE-2017-14424	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252024	7.5	HIGH Network	dlink	dir-850l_firmware	htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for rem…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2017-14423	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252025	7.5	HIGH Network	dlink	dir-850l_firmware	D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different custome…	CWE-798 Use of Hard-coded Credentials	CVE-2017-14422	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252026	9.8	CRITICAL Network	dlink	dir-850l_firmware	D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks account upon device reset, which allows remote attac…	CWE-798 Use of Hard-coded Credentials	CVE-2017-14421	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252027	5.9	MEDIUM Network	dlink	dir-850l_firmware	The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, does not verify X.509 certificates f…	CWE-295 Improper Certificate Validation	CVE-2017-14420	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252028	5.9	MEDIUM Network	dlink	dir-850l_firmware	The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, participates in mydlink Cloud Servic…	CWE-295 Improper Certificate Validation	CVE-2017-14419	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252029	8.1	HIGH Network	dlink	dir-850l_firmware	The D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices, sends the cleartext admin password over the Internet as part of interaction …	CWE-522 Insufficiently Protected Credentials	CVE-2017-14418	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm

252030	9.8	CRITICAL Network	dlink	dir-850l_firmware	register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services.	CWE-306 Missing Authentication for Critical Function	CVE-2017-14417	2024-11-21 12:12	2017-09-14	Show	GitHub Exploit DB Packet Storm