Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255151	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer に脆弱性	CWE-94 コード・インジェクション	CVE-2009-3672	2010-01-14 12:08	2009-11-25	Show	GitHub Exploit DB Packet Storm

255152	9.3	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の java.lang パッケージにおける脆弱性	CWE-362 競合状態	CVE-2009-2724	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

255153	10	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の Provider クラスにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-2721	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

255154	5	警告	有限会社シースリー	-	WebCalenderC3 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0348	2010-01-12 15:01	2010-01-12	Show	GitHub Exploit DB Packet Storm

255155	4.3	警告	有限会社シースリー	-	WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0349	2010-01-12 15:00	2010-01-12	Show	GitHub Exploit DB Packet Storm

255156	10	危険	サイバートラスト株式会社 XEmacs	-	XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2688	2010-01-12 14:48	2009-08-5	Show	GitHub Exploit DB Packet Storm

255157	6.8	警告	IBM	-	IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2746	2010-01-12 14:48	2009-11-13	Show	GitHub Exploit DB Packet Storm

255158	5	警告	アップル	-	Apple Safari におけるローカル HTML ファイルを読まれる脆弱性	CWE-Other その他	CVE-2009-2842	2010-01-7 12:09	2009-11-11	Show	GitHub Exploit DB Packet Storm

255159	5.5	警告	シックス・アパート株式会社	-	Movable Type におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	-	2010-01-6 15:01	2010-01-6	Show	GitHub Exploit DB Packet Storm

255160	9.3	危険	マイクロソフト	-	Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3135	2010-01-6 14:44	2009-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219681	7.8	HIGH Local	nec	um8000_firmware	An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affe…	NVD-CWE-noinfo	CVE-2019-20030	2024-11-21 13:37	2020-07-30	Show	GitHub Exploit DB Packet Storm

219682	8.8	HIGH Network	nec	sv8100_firmware sv9100_firmware sl1100_firmware sl2100_firmware	An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially craf…	NVD-CWE-noinfo	CVE-2019-20029	2024-11-21 13:37	2020-07-30	Show	GitHub Exploit DB Packet Storm

219683	7.5	HIGH Network	nec	sv8100_firmware sv9100_firmware sl1100_firmware sl2100_firmware	Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice resp…	NVD-CWE-noinfo	CVE-2019-20028	2024-11-21 13:37	2020-07-30	Show	GitHub Exploit DB Packet Storm

219684	9.8	CRITICAL Network	nec	sv8100_firmware sv9100_firmware sl1100_firmware sl2100_firmware	Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password…	CWE-287 Improper Authentication	CVE-2019-20027	2024-11-21 13:37	2020-07-30	Show	GitHub Exploit DB Packet Storm

219685	7.5	HIGH Network	nec	sv9100_firmware	The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request.	NVD-CWE-noinfo	CVE-2019-20026	2024-11-21 13:37	2020-07-30	Show	GitHub Exploit DB Packet Storm

219686	9.8	CRITICAL Network	nec	sv9100_firmware	Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential …	CWE-798 Use of Hard-coded Credentials	CVE-2019-20025	2024-11-21 13:37	2020-07-30	Show	GitHub Exploit DB Packet Storm

219687	7.8	HIGH Local	solarwinds	webhelpdesk	Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is mishandled in a Tic…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-20002	2024-11-21 13:37	2020-04-28	Show	GitHub Exploit DB Packet Storm

219688	3.7	LOW Network	cisco	webex_business_suite_39	Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integrity of the application. The vulnerability is due to improper…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-1866	2024-11-21 13:37	2020-04-14	Show	GitHub Exploit DB Packet Storm

219689	7.8	HIGH Local	zsh fedoraproject debian apple	zsh fedora debian_linux mac_os_x iphone_os watchos tvos ipados	In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by …	CWE-273 Improper Check for Dropped Privileges	CVE-2019-20044	2024-11-21 13:37	2020-02-24	Show	GitHub Exploit DB Packet Storm

219690	8.4	HIGH Local	cisco	ios_xe	A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default …	CWE-1188 Insecure Default Initialization of Resource	CVE-2019-1950	2024-11-21 13:37	2020-02-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed