Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253621	5	警告	Devon IT	-	Devon IT 製品に複数の脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3122	2010-09-16 15:42	2010-08-25	Show	GitHub Exploit DB Packet Storm

253622	6.4	警告	日立	-	JP1/NETM/Remote Control Agent における認証を回避される脆弱性	CWE-287 不適切な認証	-	2010-09-16 15:42	2010-08-31	Show	GitHub Exploit DB Packet Storm

253623	6.8	警告	ヒューレット・パッカード	-	HP HP-UX の Software Distributor における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2712	2010-09-15 17:18	2010-08-25	Show	GitHub Exploit DB Packet Storm

253624	6	警告	レッドハット	-	Red Hat Enterprise Linux の gdm におけるアクセス制限を回避される脆弱性	CWE-DesignError	CVE-2007-5079	2010-09-15 17:18	2007-09-25	Show	GitHub Exploit DB Packet Storm

253625	9.3	危険	ImageMagick GraphicsMagick レッドハット	-	ImageMagick および GraphicsMagick の XMakeImage 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1882	2010-09-15 17:17	2009-06-2	Show	GitHub Exploit DB Packet Storm

253626	3.3	注意	レッドハット	-	Firefox の SPICE プラグインにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-2794	2010-09-15 17:17	2010-08-25	Show	GitHub Exploit DB Packet Storm

253627	3.3	注意	レッドハット	-	Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性	CWE-362 競合状態	CVE-2010-2792	2010-09-15 17:13	2010-08-25	Show	GitHub Exploit DB Packet Storm

253628	1.9	注意	シトリックス・システムズ	-	Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-2619	2010-09-14 15:55	2010-06-17	Show	GitHub Exploit DB Packet Storm

253629	4.6	警告	シトリックス・システムズ	-	Citrix XenServer における認証を回避され Xen API (XAPI) を実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0633	2010-09-14 15:54	2010-02-12	Show	GitHub Exploit DB Packet Storm

253630	4.3	警告	シトリックス・システムズ	-	複数の Citrix XenServer 製品の XenAPI HTTP インターフェイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3253	2010-09-14 15:54	2008-07-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196381	9.8	CRITICAL Network	kmccontrols	bac-a1616bc_firmware	KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Logon.swf file.	CWE-522 Insufficiently Protected Credentials	CVE-2020-7233	2024-11-21 14:36	2020-01-20	Show	GitHub Exploit DB Packet Storm

196382	7.5	HIGH Network	evoko	home	Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff…	NVD-CWE-noinfo	CVE-2020-7232	2024-11-21 14:36	2020-01-20	Show	GitHub Exploit DB Packet Storm

196383	5.3	MEDIUM Network	evoko	home	Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid.	CWE-209 Information Exposure Through an Error Message	CVE-2020-7231	2024-11-21 14:36	2020-01-20	Show	GitHub Exploit DB Packet Storm

196384	6.5	MEDIUM Network	westermo	mrd-315_firmware	Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web applic…	NVD-CWE-noinfo	CVE-2020-7227	2024-11-21 14:36	2020-01-19	Show	GitHub Exploit DB Packet Storm

196385	5.3	MEDIUM Network	amcrest	web_server	An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result p…	CWE-287 Improper Authentication	CVE-2020-7222	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196386	8.8	HIGH Network	meinbergglobal	lantime_m300_firmware lantime_m1000_firmware	Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Config…	CWE-78 OS Command	CVE-2020-7240	2024-11-21 14:36	2020-01-21	Show	GitHub Exploit DB Packet Storm

196387	6.1	MEDIUM Network	kibokolabs	chained_quiz	The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.	CWE-79 Cross-site Scripting	CVE-2020-7104	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196388	5.3	MEDIUM Network	zte	f6x2w_firmware	V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2020-6862	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196389	5.6	MEDIUM Network	libslirp_project debian opensuse qemu	libslirp debian_linux leap qemu	tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds a…	CWE-787 Out-of-bounds Write	CVE-2020-7039	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

196390	9.1	CRITICAL Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site …	CWE-306 Missing Authentication for Critical Function	CVE-2020-7048	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed