Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251781	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2864	2011-06-16 10:30	2009-09-23	Show	GitHub Exploit DB Packet Storm

251782	4.9	警告	Linux レッドハット	-	Linux kernel の raw_release 関数におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性	CWE-20 CWE-Other	CVE-2011-1748	2011-06-16 10:27	2011-05-9	Show	GitHub Exploit DB Packet Storm

251783	4.9	警告	Linux レッドハット	-	Linux kernel の bcm_release 関数におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性	CWE-20 CWE-Other	CVE-2011-1598	2011-06-16 10:26	2011-05-9	Show	GitHub Exploit DB Packet Storm

251784	4.3	警告	Imperva Inc.	-	Imperva 製 SecureSphere にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0767	2011-06-16 10:24	2011-06-1	Show	GitHub Exploit DB Packet Storm

251785	6.8	警告	ヒューレット・パッカード	-	HP LoadRunner にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2328	2011-06-16 10:21	2011-06-1	Show	GitHub Exploit DB Packet Storm

251786	5	警告	Anymacro	-	Anymacro Mail System G4X にディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2468	2011-06-16 10:19	2011-06-1	Show	GitHub Exploit DB Packet Storm

251787	2.6	注意	マイクロソフト	-	Microsoft Outlook における開封確認機能に関する脆弱性	CWE-Other その他	-	2011-06-15 14:17	2011-06-15	Show	GitHub Exploit DB Packet Storm

251788	4.3	警告	マイクロソフト	-	ASP.NET におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-06-15 14:16	2011-06-15	Show	GitHub Exploit DB Packet Storm

251789	4.3	警告	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-06-15 14:16	2011-06-15	Show	GitHub Exploit DB Packet Storm

251790	4.3	警告	マイクロソフト	-	Microsoft 製 MSXML における HTTP リクエスト処理に関する脆弱性	CWE-Other その他	-	2011-06-15 14:15	2011-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196381	9.8	CRITICAL Network	kmccontrols	bac-a1616bc_firmware	KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Logon.swf file.	CWE-522 Insufficiently Protected Credentials	CVE-2020-7233	2024-11-21 14:36	2020-01-20	Show	GitHub Exploit DB Packet Storm

196382	7.5	HIGH Network	evoko	home	Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff…	NVD-CWE-noinfo	CVE-2020-7232	2024-11-21 14:36	2020-01-20	Show	GitHub Exploit DB Packet Storm

196383	5.3	MEDIUM Network	evoko	home	Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid.	CWE-209 Information Exposure Through an Error Message	CVE-2020-7231	2024-11-21 14:36	2020-01-20	Show	GitHub Exploit DB Packet Storm

196384	6.5	MEDIUM Network	westermo	mrd-315_firmware	Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web applic…	NVD-CWE-noinfo	CVE-2020-7227	2024-11-21 14:36	2020-01-19	Show	GitHub Exploit DB Packet Storm

196385	5.3	MEDIUM Network	amcrest	web_server	An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result p…	CWE-287 Improper Authentication	CVE-2020-7222	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196386	8.8	HIGH Network	meinbergglobal	lantime_m300_firmware lantime_m1000_firmware	Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Config…	CWE-78 OS Command	CVE-2020-7240	2024-11-21 14:36	2020-01-21	Show	GitHub Exploit DB Packet Storm

196387	6.1	MEDIUM Network	kibokolabs	chained_quiz	The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.	CWE-79 Cross-site Scripting	CVE-2020-7104	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196388	5.3	MEDIUM Network	zte	f6x2w_firmware	V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2020-6862	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196389	5.6	MEDIUM Network	libslirp_project debian opensuse qemu	libslirp debian_linux leap qemu	tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds a…	CWE-787 Out-of-bounds Write	CVE-2020-7039	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

196390	9.1	CRITICAL Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site …	CWE-306 Missing Authentication for Critical Function	CVE-2020-7048	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed