Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254231	9.3	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	JDK、JRE および SDK の HsbParser.getSoundBank 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3867	2010-02-24 12:23	2009-11-5	Show	GitHub Exploit DB Packet Storm

254232	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2010-0388	2010-02-23 11:59	2010-01-20	Show	GitHub Exploit DB Packet Storm

254233	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における複数のヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0387	2010-02-23 11:59	2010-01-20	Show	GitHub Exploit DB Packet Storm

254234	10	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0361	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

254235	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープ領域のメモリ格納場所を上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-0360	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

254236	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0273	2010-02-23 11:58	2010-01-8	Show	GitHub Exploit DB Packet Storm

254237	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0272	2010-02-23 11:57	2010-01-8	Show	GitHub Exploit DB Packet Storm

254238	7.5	危険	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の Java Web Start 実装における署名された JAR ファイルと JNLP アプリケーション処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3886	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

254239	5	警告	アップル VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の TimeZone.getTimeZone メソッドにおけるローカルファイルの存在を知られる脆弱性	CWE-Other その他	CVE-2009-3884	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

254240	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Windows Pluggable Look and Feel (PL&F) における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3883	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222331	7.5	HIGH Network	dlink	dsl-2875al_firmware dsl-2877al_firmware	D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of username_v and password_…	CWE-200 CWE-522 Information Exposure Insufficiently Protected Credentials	CVE-2019-15656	2024-11-21 13:29	2020-03-20	Show	GitHub Exploit DB Packet Storm

222332	7.5	HIGH Network	dlink	dsl-2875al_firmware	D-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted /romfile.cfg request to the web management server. This request doesn't require any authentication and …	CWE-306 CWE-522 Missing Authentication for Critical Function Insufficiently Protected Credentials	CVE-2019-15655	2024-11-21 13:29	2020-03-20	Show	GitHub Exploit DB Packet Storm

222333	7.5	HIGH Network	comba	ac2400_firmware	Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any aut…	CWE-306 Missing Authentication for Critical Function	CVE-2019-15654	2024-11-21 13:29	2020-03-20	Show	GitHub Exploit DB Packet Storm

222334	7.5	HIGH Network	comba	ap2600-i_-_a02_-_0202n00pd2_firmware	Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism. The HTML source code of the login page contains values that allow obtaining th…	CWE-327 CWE-311 CWE-522 Use of a Broken or Risky Cryptographic Algorithm Missing Encryption of Sensitive Data Insufficiently Protected Credentials	CVE-2019-15653	2024-11-21 13:29	2020-03-20	Show	GitHub Exploit DB Packet Storm

222335	8.1	HIGH Network	cisco	sd-wan_firmware	A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists …	CWE-89 SQL Injection	CVE-2019-16012	2024-11-21 13:29	2020-03-20	Show	GitHub Exploit DB Packet Storm

222336	4.8	MEDIUM Network	cisco	sd-wan_firmware	A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based managem…	CWE-79 Cross-site Scripting	CVE-2019-16010	2024-11-21 13:29	2020-03-20	Show	GitHub Exploit DB Packet Storm

222337	6.7	MEDIUM Local	fortinet	fortiap-w2 fortiap-s fortiap-u fortiap	A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administra…	CWE-78 OS Command	CVE-2019-15708	2024-11-21 13:29	2020-03-16	Show	GitHub Exploit DB Packet Storm

222338	5.9	MEDIUM Network	yarnpkg	yarn	The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. Th…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-15608	2024-11-21 13:29	2020-03-16	Show	GitHub Exploit DB Packet Storm

222339	9.8	CRITICAL Network	kill-port-process_project	kill-port-process	The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability.	CWE-78 OS Command	CVE-2019-15609	2024-11-21 13:29	2020-02-29	Show	GitHub Exploit DB Packet Storm

222340	3.3	LOW Local	freebsd	freebsd	In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect…	CWE-665 Improper Initialization	CVE-2019-15875	2024-11-21 13:29	2020-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed