Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256021 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2003-1589 2010-03-15 16:39 2003-12-2 Show GitHub Exploit DB Packet Storm
256022 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2003-1590 2010-03-15 16:39 2003-08-13 Show GitHub Exploit DB Packet Storm
256023 7.1 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の handle_dr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3722 2010-03-15 15:23 2009-10-30 Show GitHub Exploit DB Packet Storm
256024 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4406 2010-03-12 15:13 2009-12-23 Show GitHub Exploit DB Packet Storm
256025 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Network Management Card におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1798 2010-03-12 15:13 2009-12-28 Show GitHub Exploit DB Packet Storm
256026 6.8 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Network Management Card におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-1797 2010-03-12 15:12 2009-12-28 Show GitHub Exploit DB Packet Storm
256027 6.6 警告 日立 - JP1/Cm2/Network Node Manager のリモートコンソールにおけるファイルパーミッションの脆弱性 CWE-264
認可・権限・アクセス制御
- 2010-03-12 15:12 2010-02-26 Show GitHub Exploit DB Packet Storm
256028 9.3 危険 Panda Security - Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題 CWE-94
コード・インジェクション
CVE-2009-3735 2010-03-12 15:12 2010-02-12 Show GitHub Exploit DB Packet Storm
256029 5 警告 サイバートラスト株式会社
OpenSSL Project
IBM
レッドハット
- OpenSSL の dtls1_retrieve_buffered_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1379 2010-03-12 14:44 2009-05-19 Show GitHub Exploit DB Packet Storm
256030 5 警告 サイバートラスト株式会社
OpenSSL Project
IBM
レッドハット
- OpenSSL の dtls1_process_out_of_seq_message 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1378 2010-03-12 14:44 2009-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218721 7.5 HIGH
Network
moxa awk-3131a_firmware An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2019-5148 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218722 8.8 HIGH
Network
moxa awk-3131a_firmware An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry can cause an overfl… CWE-134
Use of Externally-Controlled Format String
CVE-2019-5143 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218723 7.2 HIGH
Network
moxa awk-3131a_firmware An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cau… CWE-78
OS Command 
CVE-2019-5142 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218724 8.8 HIGH
Network
moxa awk-3131a_firmware An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted iw_serverip parameter can cause user input to be re… CWE-78
OS Command 
CVE-2019-5141 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218725 8.8 HIGH
Network
moxa awk-3131a_firmware An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file name can cause user input to … CWE-78
OS Command 
CVE-2019-5140 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218726 7.1 HIGH
Local
moxa awk-3131a_firmware An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encrypti… CWE-798
 Use of Hard-coded Credentials
CVE-2019-5139 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218727 9.9 CRITICAL
Network
moxa awk-3131a_firmware An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file can cause ar… CWE-78
OS Command 
CVE-2019-5138 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218728 7.5 HIGH
Network
moxa awk-3131a_firmware The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware version 1.13. CWE-798
 Use of Hard-coded Credentials
CVE-2019-5137 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218729 8.8 HIGH
Network
moxa awk-3131a_firmware An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape fro… NVD-CWE-noinfo
CVE-2019-5136 2024-11-21 13:44 2020-02-26 Show GitHub Exploit DB Packet Storm
218730 4.3 MEDIUM
Network
ibm maximo_asset_management
maximo_for_life_sciences
maximo_for_transportation
maximo_for_oil_and_gas
maximo_for_aviation
maximo_for_utilities
maximo_for_nuclear_power
IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883. CWE-863
 Incorrect Authorization
CVE-2019-4745 2024-11-21 13:44 2020-02-25 Show GitHub Exploit DB Packet Storm