Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255201 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
255202 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
255203 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255204 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255205 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
255206 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
255207 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
255208 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
255209 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
255210 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288211 6.8 MEDIUM
Physics 		brother mfc-9970cdw_firmware Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. CWE-863
 Incorrect Authorization 		CVE-2013-2673 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288212 7.5 HIGH
Network 		brother mfc-9970cdw_firmware Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. CWE-522
 Insufficiently Protected Credentials 		CVE-2013-2672 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288213 7.5 HIGH
Network 		tp-link tl-wr1043nd_firmware TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability. NVD-CWE-noinfo
CVE-2013-2646 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288214 5.3 MEDIUM
Network 		tinywebgallery tinywebgallery TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twg_browserx" and "twg_brows… CWE-200
Information Exposure 		CVE-2013-2631 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288215 5.3 MEDIUM
Network 		telaen_project telaen Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request. CWE-200
Information Exposure 		CVE-2013-2624 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288216 6.1 MEDIUM
Network 		telaen_project telaen Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "f_email" parameter in index.php. CWE-79
Cross-site Scripting 		CVE-2013-2623 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288217 6.1 MEDIUM
Network 		uebimiau uebimiau Cross-site Scripting (XSS) in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selected_theme" parameter in error.php. CWE-79
Cross-site Scripting 		CVE-2013-2622 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288218 6.1 MEDIUM
Network 		telaen_project telaen Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL. CWE-601
Open Redirect 		CVE-2013-2621 2024-11-21 10:52 2020-02-4 Show GitHub Exploit DB Packet Storm
288219 8.8 HIGH
Network 		asus rt-n56u_firmware
rt-n10u_firmware
dsl-n55u_firmware
rt-ac66u_firmware
rt-n15u_firmware
rt-n53_firmware
rt-n16_firmware 		ASUS RT-N56U devices allow CSRF. CWE-352
 Origin Validation Error 		CVE-2013-3093 2024-11-21 10:52 2020-01-29 Show GitHub Exploit DB Packet Storm
288220 7.5 HIGH
Network 		netgear wndr4700_firmware NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash). CWE-400
 Uncontrolled Resource Consumption 		CVE-2013-3074 2024-11-21 10:52 2020-01-29 Show GitHub Exploit DB Packet Storm