Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255251	5	警告	レッドハット	-	IcedTea における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3860	2011-02-21 16:53	2010-12-8	Show	GitHub Exploit DB Packet Storm

255252	6.8	警告	レッドハット	-	IcedTea の JNLP SecurityManager におけるセキュリティポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4351	2011-02-21 14:58	2011-01-20	Show	GitHub Exploit DB Packet Storm

255253	4.3	警告	シマンテック	-	Symantec Norton Mobile Security for Android における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0113	2011-02-21 14:55	2010-11-15	Show	GitHub Exploit DB Packet Storm

255254	4.3	警告	Google	-	Android の Dalvik API におけるサービス運用妨害 (DoS) 脆弱性	CWE-noinfo 情報不足	CVE-2009-3698	2011-02-21 14:54	2009-10-14	Show	GitHub Exploit DB Packet Storm

255255	5	警告	CollabNet, Inc.	-	CollabNet ScrumWorks Basic Server における認証情報取り扱いに関する問題	CWE-310 暗号の問題	CVE-2011-0410	2011-02-21 14:54	2011-01-24	Show	GitHub Exploit DB Packet Storm

255256	5	警告	The PHP Group レッドハット	-	Libmbfl の mb_strcut 関数における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4156	2011-02-18 15:07	2010-11-10	Show	GitHub Exploit DB Packet Storm

255257	6.8	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP の xml_utf8_decode 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-5016	2011-02-18 15:03	2010-11-12	Show	GitHub Exploit DB Packet Storm

255258	6.8	警告	The PHP Group	-	PHP の set_magic_quotes_runtime 関数における SQL インジェクション攻撃を誘導される脆弱性	CWE-89 SQLインジェクション	CVE-2010-4700	2011-02-18 14:42	2010-07-1	Show	GitHub Exploit DB Packet Storm

255259	7.5	危険	The PHP Group	-	PHP の iconv_mime_decode_headers 関数におけるスパムの検出を回避される脆弱性	CWE-189 数値処理の問題	CVE-2010-4699	2011-02-18 14:40	2010-09-28	Show	GitHub Exploit DB Packet Storm

255260	5	警告	The PHP Group	-	PHP の GD 拡張モジュールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4698	2011-02-18 14:38	2010-12-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220791	6.1	MEDIUM Network	lenovo	xclarity_administrator	A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code …	CWE-79 Cross-site Scripting	CVE-2019-6181	2024-11-21 13:46	2019-09-4	Show	GitHub Exploit DB Packet Storm

220792	4.8	MEDIUM Network	lenovo	xclarity_administrator	A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be s…	CWE-79 Cross-site Scripting	CVE-2019-6180	2024-11-21 13:46	2019-09-4	Show	GitHub Exploit DB Packet Storm

220793	7.5	HIGH Network	lenovo	xclarity_administrator xclarity_integrator	An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior…	CWE-611 XXE	CVE-2019-6179	2024-11-21 13:46	2019-09-4	Show	GitHub Exploit DB Packet Storm

220794	9.8	CRITICAL Network	fortinet	fortimanager	Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image thro…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-6695	2024-11-21 13:46	2019-08-24	Show	GitHub Exploit DB Packet Storm

220795	9.8	CRITICAL Network	fortinet	fortirecorder_firmware	Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to Fort…	CWE-798 Use of Hard-coded Credentials	CVE-2019-6698	2024-11-21 13:46	2019-08-24	Show	GitHub Exploit DB Packet Storm

220796	9.8	CRITICAL Network	lenovo	solution_center	A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege esc…	CWE-200 Information Exposure	CVE-2019-6177	2024-11-21 13:46	2019-08-22	Show	GitHub Exploit DB Packet Storm

220797	9.1	CRITICAL Network	forcepoint	next_generation_firewall	Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized us…	CWE-287 Improper Authentication	CVE-2019-6143	2024-11-21 13:46	2019-08-21	Show	GitHub Exploit DB Packet Storm

220798	5.3	MEDIUM Network	lenovo	px12-350r_firmware ix12-300r_firmware home_media_network_hard_drive_firmware storecenter_ix2-200_firmware storecenter_ix4-200d_firmware storecenter_ix4-200rl_firmware	An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This…	NVD-CWE-noinfo	CVE-2019-6178	2024-11-21 13:46	2019-08-20	Show	GitHub Exploit DB Packet Storm

220799	6.8	MEDIUM Physics	lenovo	20f1_firmware 20f2_firmware 20jq_firmware 20jr_firmware 20g9_firmware 20gb_firmware 20g8_firmware 20ga_firmware 20ht_firmware 20hv_firmware 20hs_firmware 20hu_firmwar…	A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller…	NVD-CWE-noinfo	CVE-2019-6171	2024-11-21 13:46	2019-08-20	Show	GitHub Exploit DB Packet Storm

220800	7.8	HIGH Local	lenovo	yoga_700-11isk_firmware yoga_700-14isk_firmware	A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Nig…	CWE-426 Untrusted Search Path	CVE-2019-6165	2024-11-21 13:46	2019-08-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed