Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257631 7.2 危険 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-0233 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257632 6.3 警告 マイクロソフト - Microsoft Windows の KDC におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0035 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257633 7.1 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2010-0021 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257634 10 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるアクセス権を取得される脆弱性 CWE-264
CWE-310
CVE-2010-0231 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257635 7.8 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0022 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257636 9 危険 マイクロソフト - Microsoft Windows の SMB 実装における任意のコードを実行される脆弱性 CWE-20
CWE-94
CVE-2010-0020 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257637 6.9 警告 マイクロソフト - Microsoft Windows の Client/Server Run-time Subsystem における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0023 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257638 4 警告 マイクロソフト - Microsoft Windows の Hyper-V サーバ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0026 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257639 9.3 危険 日本電気
アップル
富士通
古河電気工業
ヒューレット・パッカード
インターネットイニシアティブ
アラクサラネットワークス
日立
- IPv6 NDP 実装における Neighbor Discovery メッセージの送信元検証処理に関する脆弱性 CWE-20
不適切な入力確認
CVE-2008-2476 2010-03-3 11:43 2008-10-3 Show GitHub Exploit DB Packet Storm
257640 9.3 危険 マイクロソフト - Microsoft Office PowerPoint におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0034 2010-03-2 11:29 2010-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248941 9.8 CRITICAL
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff … CWE-311
Missing Encryption of Sensitive Data
CVE-2018-10698 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248942 8.8 HIGH
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. Howe… CWE-78
OS Command 
CVE-2018-10697 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248943 8.8 HIGH
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attack… CWE-352
 Origin Validation Error
CVE-2018-10696 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248944 8.8 HIGH
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same f… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-10693 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248945 6.1 MEDIUM
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to… CWE-79
Cross-site Scripting
CVE-2018-10692 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248946 8.8 HIGH
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. Howe… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-10695 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248947 8.1 HIGH
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default. An administrator who uses the open wir… CWE-311
Missing Encryption of Sensitive Data
CVE-2018-10694 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248948 7.5 HIGH
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, the same functionality allows an attacker to downloa… CWE-284
Improper Access Control
CVE-2018-10691 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248949 8.1 HIGH
Network
moxa awk-3121_firmware An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allow… CWE-311
Missing Encryption of Sensitive Data
CVE-2018-10690 2024-11-21 12:41 2019-06-8 Show GitHub Exploit DB Packet Storm
248950 6.1 MEDIUM
Network
lantronix securelinx_spider_firmware Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page. CWE-79
Cross-site Scripting
CVE-2018-10383 2024-11-21 12:41 2019-05-3 Show GitHub Exploit DB Packet Storm