Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253431	5.8	警告	サン・マイクロシステムズ GNOME Project レッドハット	-	Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0582	2010-05-14 18:37	2009-03-14	Show	GitHub Exploit DB Packet Storm

253432	1.2	注意	日本電気サイバートラスト株式会社サン・マイクロシステムズターボリナックス OpenSSL Project レッドハット	-	RSA key reconstruction vulnerability	-	CVE-2007-3108	2010-05-14 18:37	2007-08-16	Show	GitHub Exploit DB Packet Storm

253433	5	警告	ヒューレット・パッカードサイバートラスト株式会社 OpenSSL Project ターボリナックスレッドハット	-	OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4355	2010-05-13 17:21	2010-01-13	Show	GitHub Exploit DB Packet Storm

253434	9.3	危険	日立	-	XMAP3 における任意のコードが実行される脆弱性	CWE-noinfo 情報不足	-	2010-05-13 15:14	2010-04-12	Show	GitHub Exploit DB Packet Storm

253435	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0863	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

253436	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

253437	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

253438	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

253439	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

253440	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222701	6.1	MEDIUM Network	zurmo	zurmo	Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.	CWE-79 Cross-site Scripting	CVE-2019-14472	2024-11-21 13:26	2019-08-2	Show	GitHub Exploit DB Packet Storm

222702	6.1	MEDIUM Network	testlink	testlink	TestLink 1.9.19 has XSS via the error.php message parameter.	CWE-79 Cross-site Scripting	CVE-2019-14471	2024-11-21 13:26	2019-08-2	Show	GitHub Exploit DB Packet Storm

222703	8.0	HIGH Adjacent	polycom	obihai_obi1022_firmware	On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP address field for the "Time Service Settings web" interface al…	CWE-78 OS Command	CVE-2019-14259	2024-11-21 13:26	2019-08-2	Show	GitHub Exploit DB Packet Storm

222704	7.8	HIGH Local	gnucobol_project	gnucobol	GnuCOBOL 2.2 has a buffer overflow in cb_push_op in cobc/field.c via crafted COBOL source code.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-14468	2024-11-21 13:26	2019-08-1	Show	GitHub Exploit DB Packet Storm

222705	6.1	MEDIUM Network	dlink	6600-ap_firmware dwl-3600ap_firmware	An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a post-authentication admin.cgi?action= XSS vulnerability on the management interface.	CWE-79 Cross-site Scripting	CVE-2019-14338	2024-11-21 13:26	2019-08-1	Show	GitHub Exploit DB Packet Storm

222706	5.5	MEDIUM Local	dlink	6600-ap_firmware dwl-3600ap_firmware	An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is an ability to escape to a shell in the restricted command line interface, as demonstrated by the `/bi…	CWE-78 OS Command	CVE-2019-14337	2024-11-21 13:26	2019-08-1	Show	GitHub Exploit DB Packet Storm

222707	5.5	MEDIUM Local	dlink	6600-ap_firmware dwl-3600ap_firmware	An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated dump of all of the config files through a certain admin.cgi?action= insecure HTTP …	NVD-CWE-noinfo	CVE-2019-14336	2024-11-21 13:26	2019-08-1	Show	GitHub Exploit DB Packet Storm

222708	5.5	MEDIUM Local	dlink	6600-ap_firmware dwl-3600ap_firmware dwl-8610ap_firmware	An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcer…	CWE-295 Improper Certificate Validation	CVE-2019-14334	2024-11-21 13:26	2019-08-1	Show	GitHub Exploit DB Packet Storm

222709	5.5	MEDIUM Local	dlink	6600-ap_firmware dwl-3600ap_firmware	An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a pre-authenticated denial of service attack against the access point via a long action parameter to …	NVD-CWE-noinfo	CVE-2019-14333	2024-11-21 13:26	2019-08-1	Show	GitHub Exploit DB Packet Storm

222710	7.8	HIGH Local	dlink	6600-ap_firmware dwl-3600ap_firmware	An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is use of weak ciphers for SSH such as diffie-hellman-group1-sha1.	CWE-326 Inadequate Encryption Strength	CVE-2019-14332	2024-11-21 13:26	2019-08-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed