Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253091 9.3 危険 マイクロソフト - 複数の Microsoft 製品のテキストコンバーターにおける整数オーバーフローの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2506 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
253092 9 危険 マイクロソフト - Microsoft Windows の Active Directory フェデレーションサービスにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2509 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
253093 6.9 警告 マイクロソフト - Microsoft Windows の Active Directory フェデレーションサービスのシングルサインオン実装における認証情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2508 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
253094 6.8 警告 マイクロソフト - Microsoft Windows の LSASS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3675 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
253095 9.3 危険 マイクロソフト - Microsoft Project における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0102 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
253096 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3673 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
253097 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3671 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
253098 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性 CWE-255
CWE-94
CVE-2009-3677 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
253099 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2505 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
253100 6.9 警告 acpid - acpid の umask におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4235 2010-01-21 11:44 2009-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213271 9.8 CRITICAL
Network 		fortinet fortimanager Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image thro… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-6695 2024-11-21 13:46 2019-08-24 Show GitHub Exploit DB Packet Storm
213272 9.8 CRITICAL
Network 		fortinet fortirecorder_firmware Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to Fort… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-6698 2024-11-21 13:46 2019-08-24 Show GitHub Exploit DB Packet Storm
213273 9.8 CRITICAL
Network 		lenovo solution_center A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege esc… CWE-200
Information Exposure 		CVE-2019-6177 2024-11-21 13:46 2019-08-22 Show GitHub Exploit DB Packet Storm
213274 9.1 CRITICAL
Network 		forcepoint next_generation_firewall Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized us… CWE-287
Improper Authentication 		CVE-2019-6143 2024-11-21 13:46 2019-08-21 Show GitHub Exploit DB Packet Storm
213275 5.3 MEDIUM
Network 		lenovo px12-350r_firmware
ix12-300r_firmware
home_media_network_hard_drive_firmware
storecenter_ix2-200_firmware
storecenter_ix4-200d_firmware
storecenter_ix4-200rl_firmware 		An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This… NVD-CWE-noinfo
CVE-2019-6178 2024-11-21 13:46 2019-08-20 Show GitHub Exploit DB Packet Storm
213276 6.8 MEDIUM
Physics 		lenovo 20f1_firmware
20f2_firmware
20jq_firmware
20jr_firmware
20g9_firmware
20gb_firmware
20g8_firmware
20ga_firmware
20ht_firmware
20hv_firmware
20hs_firmware
20hu_firmwar… 		A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller… NVD-CWE-noinfo
CVE-2019-6171 2024-11-21 13:46 2019-08-20 Show GitHub Exploit DB Packet Storm
213277 7.8 HIGH
Local 		lenovo yoga_700-11isk_firmware
yoga_700-14isk_firmware 		A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Nig… CWE-426
 Untrusted Search Path 		CVE-2019-6165 2024-11-21 13:46 2019-08-20 Show GitHub Exploit DB Packet Storm
213278 6.1 MEDIUM
Network 		lenovo bladecenter_hs22_firmware
bladecenter_hs22v_firmware
bladecenter_hx5_firmware
system_x_idataplex_dx360_m2_firmware
system_x_idataplex_dx360_m3_firmware
system_x3400_m3_firmware
syst… 		A stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the legacy IBM System x IMM (IMM v1) embedded Baseboard Management Controller (BMC). This vulnerability could … CWE-79
Cross-site Scripting 		CVE-2019-6159 2024-11-21 13:46 2019-08-20 Show GitHub Exploit DB Packet Storm
213279 7.5 HIGH
Network 		lenovo px12-350r_firmware
ix12-300r_firmware
home_media_network_hard_drive_firmware
storcenter_ix2-200_firmware
storcenter_ix4-200d_firmware
storcenter_ix4-200rl_firmware 		A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API. NVD-CWE-noinfo
CVE-2019-6160 2024-11-21 13:46 2019-07-17 Show GitHub Exploit DB Packet Storm
213280 4.8 MEDIUM
Network 		f5 big-ip_advanced_firewall_manager
big-ip_policy_enforcement_manager 		On BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, an undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerab… CWE-79
Cross-site Scripting 		CVE-2019-6639 2024-11-21 13:46 2019-07-4 Show GitHub Exploit DB Packet Storm