Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227301	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1638	2013-02-12 16:49	2013-01-30	Show	GitHub Exploit DB Packet Storm

227302	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1637	2013-02-12 16:48	2013-01-30	Show	GitHub Exploit DB Packet Storm

227303	9.3	危険	Ecava	-	IntegraXor SCADA Server におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4700	2013-02-12 14:26	2013-01-3	Show	GitHub Exploit DB Packet Storm

227304	5	警告	ISC, Inc. 日本電気 VMware	-	複数の DNS ネームサーバの実装に問題	CWE-DesignError	CVE-2012-1033	2013-02-8 16:14	2012-02-9	Show	GitHub Exploit DB Packet Storm

227305	8.5	危険	（複数のベンダ）	-	HP/H3C 製および Huawei 製ネットワーク機器にアクセス制限不備の脆弱性	CWE-200 情報漏えい	CVE-2012-3268	2013-02-8 15:02	2012-10-25	Show	GitHub Exploit DB Packet Storm

227306	2.6	注意	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0702	2013-02-8 12:01	2013-02-8	Show	GitHub Exploit DB Packet Storm

227307	6.5	警告	サイボウズ	-	サイボウズガルーンにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-0701	2013-02-8 12:01	2013-02-8	Show	GitHub Exploit DB Packet Storm

227308	4.3	警告	Tobias Bathge	-	WordPress 用 WP-Table Reloaded モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1463	2013-02-8 11:19	2013-01-27	Show	GitHub Exploit DB Packet Storm

227309	6.8	警告	アップル	-	複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-3684	2013-02-7 17:53	2012-09-13	Show	GitHub Exploit DB Packet Storm

227310	10	危険	シスコシステムズ	-	Cisco Unified IP Phone 7900 シリーズにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-5445	2013-02-7 17:40	2012-12-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220951	6.5	MEDIUM Network	rdkcentral	rdkb_ccsppandm	Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for …	CWE-862 Missing Authorization	CVE-2019-6961	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

220952	7.5	HIGH Network	tp-link	tl-wr1043nd_firmware	An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Auth…	CWE-326 Inadequate Encryption Strength	CVE-2019-6972	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

220953	9.8	CRITICAL Network	tp-link	tl-wr1043nd_firmware	An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without …	NVD-CWE-noinfo	CVE-2019-6971	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

220954	7.5	HIGH Network	open-xchange	open-xchange_appsuite	OX App Suite 7.10.1 and earlier allows Information Exposure.	NVD-CWE-noinfo	CVE-2019-7159	2024-11-21 13:47	2019-06-18	Show	GitHub Exploit DB Packet Storm

220955	6.1	MEDIUM Network	i-doit	i-doit	An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.	CWE-79 Cross-site Scripting	CVE-2019-6965	2024-11-21 13:47	2019-06-18	Show	GitHub Exploit DB Packet Storm

220956	9.8	CRITICAL Network	open-xchange	open-xchange_appsuite	OX App Suite 7.10.0 and earlier has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-7158	2024-11-21 13:47	2019-06-18	Show	GitHub Exploit DB Packet Storm

220957	7.5	HIGH Network	genieaccess	wip3bvaf_firmware	Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this produ…	CWE-22 Path Traversal	CVE-2019-7315	2024-11-21 13:47	2019-06-18	Show	GitHub Exploit DB Packet Storm

220958	8.8	HIGH Network	tp-link	tl-wr940n_firmware tl-wr941nd_firmware	TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote au…	CWE-787 Out-of-bounds Write	CVE-2019-6989	2024-11-21 13:47	2019-06-7	Show	GitHub Exploit DB Packet Storm

220959	6.5	MEDIUM Network	progress	sitefinity	Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries to overwrite the cookie in the browser, but it remains valid on the server side. This means the cookie…	CWE-613 Insufficient Session Expiration	CVE-2019-7215	2024-11-21 13:47	2019-06-7	Show	GitHub Exploit DB Packet Storm

220960	7.8	HIGH Local	linksys	wrt1900acs_firmware	An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (admin-auth) is stored on a victim's computer results in the admin password being…	CWE-311 Missing Encryption of Sensitive Data	CVE-2019-7311	2024-11-21 13:47	2019-06-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed