Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253141	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253142	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253143	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253144	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253145	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

253146	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

253147	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
288131	-	monroe_electronics digital_alert_systems	r189_one-net_eas dasdec_eas	The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it …	CWE-310 Cryptographic Issues	CVE-2013-0137	2024-11-21 10:46	2013-07-1	Show	GitHub Exploit DB Packet Storm

288132	-	typoheads	formhandler	SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2012-6577	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm

288133	-	antti_alamki	prh_search	Cross-site scripting (XSS) vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified…	CWE-79 Cross-site Scripting	CVE-2012-6576	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm

288134	-	mobile4social	exposed_filter_data	Cross-site scripting (XSS) vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-6575	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm

288135	-	soprano	fonecta_verify	Cross-site scripting (XSS) vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspeci…	CWE-79 Cross-site Scripting	CVE-2012-6574	2024-11-21 10:46	2013-06-28	Show	GitHub Exploit DB Packet Storm

288136	-	alejandro_garza	apachesolr_autocomplete	Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-6573	2024-11-21 10:46	2013-06-26	Show	GitHub Exploit DB Packet Storm

288137	-	kong	inf08	Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template.php in the Inf08 theme 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with the "…	CWE-79 Cross-site Scripting	CVE-2012-6572	2024-11-21 10:46	2013-06-22	Show	GitHub Exploit DB Packet Storm

288138	-	huawei	ar_19\/29\/49 ar_18-2x ar_18-3x ar_28\/46 ar_18-1x s2300 s8500 s3300hi s3500 s5100 s3000 s5600 s3900 s3300 s3700 s2700 s7800 s2000	The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses pre…	CWE-310 Cryptographic Issues	CVE-2012-6571	2024-11-21 10:46	2013-06-21	Show	GitHub Exploit DB Packet Storm

288139	-	huawei	ar_19\/29\/49 ar_18-2x ar_18-3x ar_28\/46 ar_18-1x s2300 s8500 s3300hi s3500 s5100 s3000 s5600 s3900 s3300 s3700 s2700 s7800 s2000	The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches d…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6570	2024-11-21 10:46	2013-06-21	Show	GitHub Exploit DB Packet Storm

288140	-	huawei	ar_19\/29\/49 ar_18-2x ar_18-3x ar_28\/46 ar_18-1x s2300 s8500 s3300hi s3500 s5100 s3000 s5600 s3900 s3300 s3700 s2700 s7800 s2000	Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S56…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6569	2024-11-21 10:46	2013-06-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed