Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253021	-	-	ウインドリバー株式会社	-	Wind River Systems VxWorks の認証 API (loginLib) における問題	-	-	2010-08-26 16:57	2010-08-3	Show	GitHub Exploit DB Packet Storm

253022	-	-	ウインドリバー株式会社	-	Wind River Systems VxWorks においてデバッグサービスがデフォルトで有効になっている問題	-	-	2010-08-26 16:57	2010-08-3	Show	GitHub Exploit DB Packet Storm

253023	7.5	危険	サイバートラスト株式会社レッドハット Alexander V. Lukyanov	-	LFTP の get1 コマンドにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2251	2010-08-26 16:57	2010-07-6	Show	GitHub Exploit DB Packet Storm

253024	5	警告	日立	-	JP1/Integrated Manager および JP1/Integrated Management 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-08-26 16:56	2010-07-30	Show	GitHub Exploit DB Packet Storm

253025	5	警告	日立	-	JP1/PAM におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-08-26 16:56	2010-07-30	Show	GitHub Exploit DB Packet Storm

253026	5	警告	日立	-	JP1/AJS の組み込みDB利用製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-08-26 16:55	2010-07-30	Show	GitHub Exploit DB Packet Storm

253027	5	警告	日立	-	JP1/ServerConductor/Control Manager におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-08-26 16:55	2010-07-30	Show	GitHub Exploit DB Packet Storm

253028	7.8	危険	日立	-	Cosminexus 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-08-26 16:55	2010-07-30	Show	GitHub Exploit DB Packet Storm

253029	4.3	警告	サイバートラスト株式会社レッドハット	-	Apache Tomcat のサンプル用 calendar アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2696	2010-08-25 17:05	2010-08-2	Show	GitHub Exploit DB Packet Storm

253030	4.3	警告	インターネットイニシアティブ	-	SEIL/X シリーズおよび SEIL/B1 における IPv6 Unicast RPF 機能に関する脆弱性	CWE-Other その他	CVE-2010-2363	2010-08-25 12:01	2010-08-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223471	5.5	MEDIUM Local	cylan	clever_dog_smart_camera_panorama_dog-2w_firmware clever_dog_smart_camera_plus_dog-2w-v4_firmware	On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP…	CWE-306 Missing Authentication for Critical Function	CVE-2019-12919	2024-11-21 13:23	2019-06-21	Show	GitHub Exploit DB Packet Storm

223472	5.4	MEDIUM Network	seeddms	seeddms	out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name field.	CWE-79 Cross-site Scripting	CVE-2019-12745	2024-11-21 13:23	2019-06-21	Show	GitHub Exploit DB Packet Storm

223473	7.5	HIGH Network	seeddms	seeddms	SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a different vulnerability than CVE-2018-12940.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-12744	2024-11-21 13:23	2019-06-21	Show	GitHub Exploit DB Packet Storm

223474	6.1	MEDIUM Network	afian	filerun	FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. This issue has been fixed in FileRun 2019.06.01.	CWE-79 Cross-site Scripting	CVE-2019-12905	2024-11-21 13:23	2019-06-21	Show	GitHub Exploit DB Packet Storm

223475	5.9	MEDIUM Network	gnupg opensuse	libgcrypt leap	In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on p…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-12904	2024-11-21 13:23	2019-06-20	Show	GitHub Exploit DB Packet Storm

223476	4.3	MEDIUM Network	pydio	cells	Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes the database column/table name as pert of the error message, exposing sens…	CWE-209 Information Exposure Through an Error Message	CVE-2019-12903	2024-11-21 13:23	2019-06-20	Show	GitHub Exploit DB Packet Storm

223477	6.5	MEDIUM Network	pydio	cells	Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore the deleted user's data.	CWE-459 Incomplete Cleanup	CVE-2019-12902	2024-11-21 13:23	2019-06-20	Show	GitHub Exploit DB Packet Storm

223478	8.8	HIGH Network	pydio	cells	Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, and Delete files/folders from, an unprivileged directory, leading to Privi…	CWE-22 Path Traversal	CVE-2019-12901	2024-11-21 13:23	2019-06-20	Show	GitHub Exploit DB Packet Storm

223479	9.8	CRITICAL Network	bzip debian opensuse canonical freebsd python	bzip2 debian_linux leap ubuntu_linux freebsd python	BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.	CWE-787 Out-of-bounds Write	CVE-2019-12900	2024-11-21 13:23	2019-06-20	Show	GitHub Exploit DB Packet Storm

223480	9.8	CRITICAL Network	deltaww	devicenet_builder	Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3.	CWE-787 Out-of-bounds Write	CVE-2019-12899	2024-11-21 13:23	2019-06-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed