Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226871 10 危険 roshan shah - Drupal 用の Quota by role モジュールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3352 2012-12-20 19:28 2009-09-9 Show GitHub Exploit DB Packet Storm
226872 10 危険 roshan shah - Drupal 用の Subdomain Manager モジュールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3350 2012-12-20 19:28 2009-09-9 Show GitHub Exploit DB Packet Storm
226873 10 危険 SAP - SAP Crystal Reports Server における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3346 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
226874 10 危険 SAP - SAP Crystal Reports Server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3345 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
226875 5 警告 SAP - Windows 上で稼動する Crystal Reports Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3344 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
226876 7.5 危険 s9y - S9Y 用の Freetag プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3337 2012-12-20 19:28 2009-08-27 Show GitHub Exploit DB Packet Storm
226877 7.5 危険 phpprobid - PHP Pro Bid の auction_details.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3336 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
226878 7.5 危険 turtus - Joomla! 用の TurtuShout コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3335 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
226879 7.5 危険 sopinet - Joomla! 用の JBudgetsMagic コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3332 2012-12-20 19:28 2009-09-23 Show GitHub Exploit DB Packet Storm
226880 4.3 警告 webilix - WX-Guestbook の sign.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3328 2012-12-20 19:28 2009-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222441 9.8 CRITICAL
Network 		totolink a3002ru_firmware
a702r_firmware
n301rt_firmware
n302r_firmware
n300rt_firmware
n200re_firmware
n150rt_firmware
n100re_firmware 		On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. (Also, the CAPT… CWE-287
Improper Authentication 		CVE-2019-19825 2024-11-21 13:35 2020-01-28 Show GitHub Exploit DB Packet Storm
222442 8.8 HIGH
Network 		bigswitch big_cloud_fabric
big_monitoring_fabric
multi-cloud_director 		An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 … CWE-200
Information Exposure 		CVE-2019-19631 2024-11-21 13:35 2020-01-25 Show GitHub Exploit DB Packet Storm
222443 6.1 MEDIUM
Network 		bigswitch big_cloud_fabric
big_monitoring_fabric
multi-cloud_director 		An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 … CWE-79
Cross-site Scripting 		CVE-2019-19632 2024-11-21 13:35 2020-01-25 Show GitHub Exploit DB Packet Storm
222444 7.5 HIGH
Network 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely. CWE-319
CWE-522
Cleartext Transmission of Sensitive Information
 Insufficiently Protected Credentials 		CVE-2019-19898 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
222445 9.8 CRITICAL
Network 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT … CWE-78
OS Command  		CVE-2019-19897 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
222446 9.9 CRITICAL
Network 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of dire… CWE-276
Incorrect Default Permissions  		CVE-2019-19896 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
222447 7.8 HIGH
Local 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_COD… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-19895 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
222448 5.5 MEDIUM
Local 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renamin… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-19894 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
222449 7.5 HIGH
Network 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT … CWE-22
Path Traversal 		CVE-2019-19893 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
222450 9.8 CRITICAL
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploa… CWE-78
OS Command  		CVE-2019-19839 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm