Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255561 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
255562 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
255563 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255564 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255565 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
255566 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
255567 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
255568 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
255569 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
255570 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249301 7.5 HIGH
Network 		sierra_wireless airlink_raven_xe_firmware
airlink_raven_xt_firmware 		An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive informati… CWE-200
Information Exposure 		CVE-2017-6046 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249302 9.8 CRITICAL
Network 		sierra_wireless airlink_raven_xe_firmware
airlink_raven_xt_firmware 		An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can… CWE-306
Missing Authentication for Critical Function 		CVE-2017-6044 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249303 8.8 HIGH
Network 		sierra_wireless airlink_raven_xe_firmware
airlink_raven_xt_firmware 		A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify… CWE-352
 Origin Validation Error 		CVE-2017-6042 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249304 5.3 MEDIUM
Network 		belden_hirschmann gecko_lite_managed_switch_firmware An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. Non-sensitive information can be obtained anonymously. CWE-200
Information Exposure 		CVE-2017-6040 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249305 7.1 HIGH
Network 		belden_hirschmann gecko_lite_managed_switch_firmware A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests wer… CWE-352
 Origin Validation Error 		CVE-2017-6038 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249306 9.8 CRITICAL
Network 		marel a320_firmware
a325_firmware
a371_firmware
a520_master_firmware
a520_slave_firmware
a530_firmware
a542_firmware
a571_firmware
check_bin_grader_firmware
flowlineqc_t376_firmw… 		An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check B… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2017-6041 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249307 6.5 MEDIUM
Network 		belden_hirschmann gecko_lite_managed_switch_firmware A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently veri… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2017-6036 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249308 9.8 CRITICAL
Network 		schneider-electric modbus_firmware An Authentication Bypass by Capture-Replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which … CWE-287
Improper Authentication 		CVE-2017-6034 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249309 5.3 MEDIUM
Network 		schneider-electric modbus_firmware A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to brute-f… CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2017-6032 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm
249310 9.8 CRITICAL
Network 		schneider-electric modicon_m241_firmware
modicon_m251_firmware 		An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are se… CWE-522
 Insufficiently Protected Credentials 		CVE-2017-6028 2024-11-21 12:28 2017-06-30 Show GitHub Exploit DB Packet Storm