Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254391	7.8	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における終端文字列の処理に関する重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-2495	2011-01-14 14:33	2009-07-28	Show	GitHub Exploit DB Packet Storm

254392	9.3	危険	サン・マイクロシステムズアドビシステムズ日本電気マイクロソフト OpenOffice.org Project	-	Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2493	2011-01-14 14:32	2009-07-28	Show	GitHub Exploit DB Packet Storm

254393	9.3	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0901	2011-01-14 14:31	2009-07-28	Show	GitHub Exploit DB Packet Storm

254394	6.9	警告	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3957	2011-01-13 16:22	2010-12-14	Show	GitHub Exploit DB Packet Storm

254395	9.3	危険	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3956	2011-01-13 16:19	2010-12-14	Show	GitHub Exploit DB Packet Storm

254396	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3346	2011-01-13 16:15	2010-12-14	Show	GitHub Exploit DB Packet Storm

254397	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3345	2011-01-13 16:11	2010-12-14	Show	GitHub Exploit DB Packet Storm

254398	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3343	2011-01-13 15:48	2010-12-14	Show	GitHub Exploit DB Packet Storm

254399	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3340	2011-01-13 15:43	2010-12-14	Show	GitHub Exploit DB Packet Storm

254400	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Advanced Audio Coding におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4395	2011-01-12 15:29	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218911	8.8	HIGH Network	moxa	awk-3131a_firmware	An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file name can cause user input to …	CWE-78 OS Command	CVE-2019-5140	2024-11-21 13:44	2020-02-26	Show	GitHub Exploit DB Packet Storm

218912	7.1	HIGH Local	moxa	awk-3131a_firmware	An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encrypti…	CWE-798 Use of Hard-coded Credentials	CVE-2019-5139	2024-11-21 13:44	2020-02-26	Show	GitHub Exploit DB Packet Storm

218913	9.9	CRITICAL Network	moxa	awk-3131a_firmware	An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file can cause ar…	CWE-78 OS Command	CVE-2019-5138	2024-11-21 13:44	2020-02-26	Show	GitHub Exploit DB Packet Storm

218914	7.5	HIGH Network	moxa	awk-3131a_firmware	The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware version 1.13.	CWE-798 Use of Hard-coded Credentials	CVE-2019-5137	2024-11-21 13:44	2020-02-26	Show	GitHub Exploit DB Packet Storm

218915	8.8	HIGH Network	moxa	awk-3131a_firmware	An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape fro…	NVD-CWE-noinfo	CVE-2019-5136	2024-11-21 13:44	2020-02-26	Show	GitHub Exploit DB Packet Storm

218916	4.3	MEDIUM Network	ibm	maximo_asset_management maximo_for_life_sciences maximo_for_transportation maximo_for_oil_and_gas maximo_for_aviation maximo_for_utilities maximo_for_nuclear_power	IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883.	CWE-863 Incorrect Authorization	CVE-2019-4745	2024-11-21 13:44	2020-02-25	Show	GitHub Exploit DB Packet Storm

218917	5.3	MEDIUM Adjacent	ibm	spectrum_protect_plus	IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information.	NVD-CWE-noinfo	CVE-2019-4703	2024-11-21 13:44	2020-02-25	Show	GitHub Exploit DB Packet Storm

218918	8.8	HIGH Network	ibm	emptoris_spend_analysis emptoris_strategic_supply_management_platform	IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL s…	CWE-89 SQL Injection	CVE-2019-4752	2024-11-21 13:44	2020-02-21	Show	GitHub Exploit DB Packet Storm

218919	8.8	HIGH Network	accusoft	imagegear	An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted TIFF file file can cause an out…	CWE-787 Out-of-bounds Write	CVE-2019-5187	2024-11-21 13:44	2020-02-15	Show	GitHub Exploit DB Packet Storm

218920	7.5	HIGH Network	arubanetworks	5400r_firmware 3810_firmware 2920_firmware 2930_firmware 2530_with_gigt_port_firmware 2530_10\/100_port_firmware 2540_firmware	A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerabilit…	NVD-CWE-noinfo	CVE-2019-5322	2024-11-21 13:44	2020-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed