Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227271	6.8	警告	サン・マイクロシステムズ	-	Sun Java System Delegated Administrator の da/DA/Login における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2009-1357	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

227272	4	警告	sergey lyubka	-	Mongoose におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1354	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

227273	5	警告	sebastian fernandez	-	Zervit Webserver の libz/misc.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1353	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

227274	4.3	警告	レッドハット	-	C2Net Stronghold におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1349	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

227275	6	警告	TWiki	-	TWiki におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-1339	2012-12-20 19:10	2009-04-5	Show	GitHub Exploit DB Packet Storm

227276	5	警告	サン・マイクロシステムズ	-	Sun Java System Directory Server および Enterprise Edition の Online Help 機能におけるファイルの一部のコンテンツを取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-1332	2012-12-20 19:10	2009-04-15	Show	GitHub Exploit DB Packet Storm

227277	7.5	危険	webfileexplorer	-	Web File Explorer の body.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1323	2012-12-20 19:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

227278	4.3	警告	zazzle	-	Zazzle Store Builder の include/zstore.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1320	2012-12-20 19:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

227279	10	危険	webfileexplorer	-	Web File Explorer の body.asp における任意のファイルを作成される脆弱性	CWE-noinfo 情報不足	CVE-2009-1314	2012-12-20 19:10	2009-04-16	Show	GitHub Exploit DB Packet Storm

227280	5	警告	Rapid Leech	-	Rapidleech の upload.php における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1089	2012-12-20 19:10	2009-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222041	9.8	CRITICAL Network	totolink	a3002ru_firmware a702r_firmware n301rt_firmware n302r_firmware n300rt_firmware n200re_firmware n150rt_firmware n100re_firmware	On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. (Also, the CAPT…	CWE-287 Improper Authentication	CVE-2019-19825	2024-11-21 13:35	2020-01-28	Show	GitHub Exploit DB Packet Storm

222042	8.8	HIGH Network	bigswitch	big_cloud_fabric big_monitoring_fabric multi-cloud_director	An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 …	CWE-200 Information Exposure	CVE-2019-19631	2024-11-21 13:35	2020-01-25	Show	GitHub Exploit DB Packet Storm

222043	6.1	MEDIUM Network	bigswitch	big_cloud_fabric big_monitoring_fabric multi-cloud_director	An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 …	CWE-79 Cross-site Scripting	CVE-2019-19632	2024-11-21 13:35	2020-01-25	Show	GitHub Exploit DB Packet Storm

222044	7.5	HIGH Network	ixpdata	easyinstall	In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely.	CWE-319 CWE-522 Cleartext Transmission of Sensitive Information Insufficiently Protected Credentials	CVE-2019-19898	2024-11-21 13:35	2020-01-24	Show	GitHub Exploit DB Packet Storm

222045	9.8	CRITICAL Network	ixpdata	easyinstall	In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT …	CWE-78 OS Command	CVE-2019-19897	2024-11-21 13:35	2020-01-24	Show	GitHub Exploit DB Packet Storm

222046	9.9	CRITICAL Network	ixpdata	easyinstall	In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of dire…	CWE-276 Incorrect Default Permissions	CVE-2019-19896	2024-11-21 13:35	2020-01-24	Show	GitHub Exploit DB Packet Storm

222047	7.8	HIGH Local	ixpdata	easyinstall	In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_COD…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19895	2024-11-21 13:35	2020-01-24	Show	GitHub Exploit DB Packet Storm

222048	5.5	MEDIUM Local	ixpdata	easyinstall	In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renamin…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19894	2024-11-21 13:35	2020-01-24	Show	GitHub Exploit DB Packet Storm

222049	7.5	HIGH Network	ixpdata	easyinstall	In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT …	CWE-22 Path Traversal	CVE-2019-19893	2024-11-21 13:35	2020-01-24	Show	GitHub Exploit DB Packet Storm

222050	9.8	CRITICAL Network	ruckuswireless	unleashed zonedirector_1200_firmware	emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploa…	CWE-78 OS Command	CVE-2019-19839	2024-11-21 13:35	2020-01-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed