Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251111	2.6	注意	アップルアドビシステムズレッドハットオラクル	-	Flash Player におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3636	2011-02-1 16:20	2010-11-9	Show	GitHub Exploit DB Packet Storm

251112	8.5	危険	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL の dispatch_command 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2009-2446	2011-02-1 16:19	2009-07-7	Show	GitHub Exploit DB Packet Storm

251113	9.3	危険	サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	Windows 上で稼働する OpenOffice.org の Impress モジュールにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2936	2011-02-1 16:13	2010-08-25	Show	GitHub Exploit DB Packet Storm

251114	9.3	危険	サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	Windows 上で稼働する OpenOffice.org の Impress モジュールにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-2935	2011-02-1 16:11	2010-08-25	Show	GitHub Exploit DB Packet Storm

251115	1.9	注意	Linux レッドハット	-	Linux kernel における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4525	2011-02-1 14:08	2011-01-11	Show	GitHub Exploit DB Packet Storm

251116	1.9	注意	Linux レッドハット	-	Linux kernel の ntty_ioctl_tiocgicount 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4077	2011-02-1 13:33	2010-11-29	Show	GitHub Exploit DB Packet Storm

251117	4	警告	Linux レッドハット	-	Linux kernel の bcm_connect 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3874	2011-01-31 15:49	2010-12-8	Show	GitHub Exploit DB Packet Storm

251118	1.9	注意	Linux レッドハット	-	Linux kernel の viafb_ioctl_get_viafb_info 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4082	2011-01-31 15:40	2010-11-30	Show	GitHub Exploit DB Packet Storm

251119	1.9	注意	Linux レッドハット	-	Linux kernel の ivtvfb_ioctl 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4079	2011-01-31 15:03	2010-11-29	Show	GitHub Exploit DB Packet Storm

251120	1.9	注意	Linux レッドハット	-	Linux kernel の USB サブシステムにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4074	2011-01-31 15:01	2010-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212781	6.5	MEDIUM Network	axiosys	bento4	An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42h…	CWE-617 Reachable Assertion	CVE-2019-7697	2024-11-21 13:48	2019-02-11	Show	GitHub Exploit DB Packet Storm

212782	6.1	MEDIUM Network	axiositalia	registro_elettronico	Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendo…	CWE-79 Cross-site Scripting	CVE-2019-7693	2024-11-21 13:48	2019-02-11	Show	GitHub Exploit DB Packet Storm

212783	9.8	CRITICAL Network	cim_project	cim	install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call…	CWE-94 Code Injection	CVE-2019-7692	2024-11-21 13:48	2019-02-11	Show	GitHub Exploit DB Packet Storm

212784	9.8	CRITICAL Network	inxedu	inxedu	inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadController#gok4 (com/inxe…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-7684	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

212785	9.8	CRITICAL Network	enphase	envoy	A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888.	CWE-22 Path Traversal	CVE-2019-7678	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

212786	6.1	MEDIUM Network	enphase	envoy	XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888.	CWE-79 Cross-site Scripting	CVE-2019-7677	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

212787	7.2	HIGH Network	enphase	envoy	A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account.	CWE-521 Weak Password Requirements	CVE-2019-7676	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

212788	7.5	HIGH Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html UR…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-7675	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

212789	9.8	CRITICAL Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.	CWE-521 Weak Password Requirements	CVE-2019-7674	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

212790	7.5	HIGH Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-7673	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed