Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253761 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253762 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253763 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
253764 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
253765 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280311 8.1 HIGH
Network 		percona toolkit The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by leveraging use of HTTP to… CWE-200
Information Exposure 		CVE-2014-2029 2024-11-21 11:05 2017-09-29 Show GitHub Exploit DB Packet Storm
280312 6.1 MEDIUM
Network 		viprinet multichannel_vpn_router_300_firmware Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 300 allow remote attackers to inject arbitrary web script or HTML via the usernam… CWE-79
Cross-site Scripting 		CVE-2014-2045 2024-11-21 11:05 2017-01-21 Show GitHub Exploit DB Packet Storm
280313 6.5 MEDIUM
Network 		cisco ios_xe
ios 		The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attack… CWE-20
 Improper Input Validation  		CVE-2014-2146 2024-11-21 11:05 2016-09-23 Show GitHub Exploit DB Packet Storm
280314 - apache tapestry Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service (resource consum… CWE-399
 Resource Management Errors 		CVE-2014-1972 2024-11-21 11:05 2015-08-23 Show GitHub Exploit DB Packet Storm
280315 - impresscms impresscms Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_pat… CWE-22
Path Traversal 		CVE-2014-1836 2024-11-21 11:05 2015-07-1 Show GitHub Exploit DB Packet Storm
280316 - cisco telepresence_tc_software
telepresence_te_software 		Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local… CWE-284
Improper Access Control 		CVE-2014-2174 2024-11-21 11:05 2015-05-25 Show GitHub Exploit DB Packet Storm
280317 - y-cam ycb004_firmware
ycb002_firmware
yck002_firmware
yck003_firmware
yceb03_firmware
ycb001_firmware
ycblhd5_firmware
ycblb3_firmware
ycblb3
ycb003_firmware
ycw003_firmware 		Multiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD… CWE-79
Cross-site Scripting 		CVE-2014-1902 2024-11-21 11:05 2015-05-14 Show GitHub Exploit DB Packet Storm
280318 - y-cam yceb03_firmware
ycb004_firmware
ycb002_firmware
ycbl03_firmware
ycbl03
ycblb3_firmware
ycblb3
yck002_firmware
ycblhd5_firmware
ycw003_firmware
ycw001_firmware
ycw002_… 		Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and Y… CWE-20
 Improper Input Validation  		CVE-2014-1901 2024-11-21 11:05 2015-05-14 Show GitHub Exploit DB Packet Storm
280319 - y-cam ycb002_firmware
ycb004_firmware
ycw003_firmware
ycb001_firmware
ycblhd5_firmware
ycbl03_firmware
ycbl03
ycblb3_firmware
ycblb3
ycw001_firmware
yck004_firmware
yck003_… 		Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and Y… CWE-200
Information Exposure 		CVE-2014-1900 2024-11-21 11:05 2015-05-14 Show GitHub Exploit DB Packet Storm
280320 - egroupware egroupware eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly execute arbitrary code via the (1) addr_fields or (2) trans pa… CWE-94
Code Injection 		CVE-2014-2027 2024-11-21 11:05 2015-03-31 Show GitHub Exploit DB Packet Storm