Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251461	1.2	注意	アップル	-	Apple Safari の「Safari をリセット」における保存されているウェブサイトパスワードを読まれる脆弱性	CWE-362 競合状態	CVE-2009-1707	2010-12-10 14:21	2009-06-8	Show	GitHub Exploit DB Packet Storm

251462	4	警告	アップル	-	Apple Mac OS X の Dovecot における電子メールを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-4011	2010-12-9 14:50	2010-11-17	Show	GitHub Exploit DB Packet Storm

251463	7.8	危険	富士通	-	Interstage Application Server における情報漏えいの脆弱性	CWE-200 情報漏えい	-	2010-12-9 14:43	2010-11-15	Show	GitHub Exploit DB Packet Storm

251464	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-4010	2010-12-9 14:37	2010-11-16	Show	GitHub Exploit DB Packet Storm

251465	5	警告	IBM	-	IBM WebSphere Application Server の Web Services Security コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0786	2010-12-9 14:34	2010-11-9	Show	GitHub Exploit DB Packet Storm

251466	4.3	警告	IBM	-	IBM WebSphere Application Server の Integrated Solution コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4220	2010-12-9 14:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

251467	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1813	2010-12-8 15:52	2010-09-8	Show	GitHub Exploit DB Packet Storm

251468	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0784	2010-12-8 15:31	2010-11-9	Show	GitHub Exploit DB Packet Storm

251469	6.8	警告	シックス・アパート株式会社	-	Movable Type における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3922	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

251470	4.3	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3921	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212911	9.8	CRITICAL Network	qnap	qts	This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.	CWE-20 Improper Input Validation	CVE-2019-7193	2024-11-21 13:47	2019-12-6	Show	GitHub Exploit DB Packet Storm

212912	9.8	CRITICAL Network	qnap	photo_station	This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versi…	CWE-863 Incorrect Authorization	CVE-2019-7192	2024-11-21 13:47	2019-12-6	Show	GitHub Exploit DB Packet Storm

212913	4.8	MEDIUM Network	qnap	music_station	This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recomme…	CWE-79 Cross-site Scripting	CVE-2019-7185	2024-11-21 13:47	2019-12-6	Show	GitHub Exploit DB Packet Storm

212914	4.8	MEDIUM Network	qnap	video_station	This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recomme…	CWE-79 Cross-site Scripting	CVE-2019-7184	2024-11-21 13:47	2019-12-6	Show	GitHub Exploit DB Packet Storm

212915	9.8	CRITICAL Network	qnap	qts	This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.	CWE-59 Link Following	CVE-2019-7183	2024-11-21 13:47	2019-12-6	Show	GitHub Exploit DB Packet Storm

212916	7.8	HIGH Local	qnap	netbak_replicator	An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute a…	CWE-428 Unquoted Search Path or Element	CVE-2019-7201	2024-11-21 13:47	2019-12-5	Show	GitHub Exploit DB Packet Storm

212917	4.8	MEDIUM Network	qnap	qts	A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the adm…	CWE-79 Cross-site Scripting	CVE-2019-7197	2024-11-21 13:47	2019-12-5	Show	GitHub Exploit DB Packet Storm

212918	6.1	MEDIUM Network	schneider-electric	andover_continuum_9680_firmware andover_continuum_5740_firmware andover_continuum_5720_firmware andover_continuum_bcx4040_firmware andover_continuum_bcx9640_firmware andover_continuum_…	A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful …	CWE-79 Cross-site Scripting	CVE-2019-6853	2024-11-21 13:47	2019-11-21	Show	GitHub Exploit DB Packet Storm

212919	7.5	HIGH Network	schneider-electric	bmx_p34x_firmware bmx_noe_0100_firmware bmx_noe_0110_firmware bmx_noc_0401_firmware tsx_p57x_firmware tsx_ety_x103_firmware 140_cpu6x_firmware 140_noe_771x1_firmware 140_noc_7…	A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication mo…	CWE-200 Information Exposure	CVE-2019-6852	2024-11-21 13:47	2019-11-21	Show	GitHub Exploit DB Packet Storm

212920	7.5	HIGH Network	schneider-electric	modicon_m580_firmware modicon_m340_firmware tsxmcpc002m_firmware tsxmcpc512k_firmware tsxmfpp001m_firmware tsxmfpp002m_firmware tsxmfpp004m_firmware tsxmfpp512k_firmware tsxmr…	A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of i…	CWE-200 Information Exposure	CVE-2019-6851	2024-11-21 13:47	2019-10-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed