Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257421 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257422 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
257423 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
257424 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265501 5.9 MEDIUM
Network 		ieasytec itrack_easy A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device. CWE-284
Improper Access Control 		CVE-2016-6543 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265502 3.7 LOW
Network 		ieasytec itrackeasy The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address. CWE-20
 Improper Input Validation  		CVE-2016-6542 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265503 9.8 CRITICAL
Network 		shdesigns resident_download_manager SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applica… CWE-20
 Improper Input Validation  		CVE-2016-6567 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265504 8.1 HIGH
Network 		infinixauthority
bluproducts
xolo
beeline
iku-mobile
leagoo
doogee 		hot_x507_firmware
hot_2_x510_firmware
zero_x506_firmware
zero_2_x509_firmware
studio_g_firmware
studio_g_plus_firmware
studio_6.0_hd_firmware
studio_x_firmware
studio_x_plus_f… 		Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this bina… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6564 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265505 9.8 CRITICAL
Network 		dlink dir-823_firmware
dir-822_firmware
dir-818l\(w\)_firmware
dir-895l_firmware
dir-890l_firmware
dir-885l_firmware
dir-880l_firmware
dir-868l_firmware
dir-850l_firmware 		Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6563 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265506 9.8 CRITICAL
Network 		freebsd freebsd Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory. The full impact and severity depend… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6559 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265507 9.8 CRITICAL
Network 		asus rp-ac52_firmware
ea-n66_firmware
rp-n12_firmware
rp-n14_firmware
rp-n53_firmware
rp-ac56_firmware
wmp-n12_firmware 		A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the action_script parameter. The … CWE-77
Command Injection 		CVE-2016-6558 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265508 8.8 HIGH
Network 		asus rp-ac52_firmware
ea-n66_firmware
rp-n12_firmware
rp-n14_firmware
rp-n53_firmware
rp-ac56_firmware
wmp-n12_firmware 		In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided… CWE-352
 Origin Validation Error 		CVE-2016-6557 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265509 8.8 HIGH
Adjacent 		thetrackr trackr_bravo_firmware TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Andro… CWE-287
Improper Authentication 		CVE-2016-6541 2024-11-21 11:56 2018-07-7 Show GitHub Exploit DB Packet Storm
265510 6.5 MEDIUM
Adjacent 		thetrackr trackr_bravo_firmware Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which can be discovered a… CWE-200
Information Exposure 		CVE-2016-6540 2024-11-21 11:56 2018-07-7 Show GitHub Exploit DB Packet Storm