Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256161	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0821	2010-07-2 16:23	2010-06-8	Show	GitHub Exploit DB Packet Storm

256162	7.2	危険	マイクロソフト	-	複数の Microsoft 製品の Windows OpenType Compact Font Format ドライバにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0819	2010-07-1 16:21	2010-06-8	Show	GitHub Exploit DB Packet Storm

256163	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1255	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

256164	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0485	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

256165	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0484	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

256166	4.3	警告	マイクロソフト	-	Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0817	2010-07-1 16:02	2010-04-29	Show	GitHub Exploit DB Packet Storm

256167	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Data Analyzer ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0252	2010-07-1 16:02	2010-02-9	Show	GitHub Exploit DB Packet Storm

256168	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0255	2010-07-1 16:01	2010-02-3	Show	GitHub Exploit DB Packet Storm

256169	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1262	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

256170	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1259	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220451	8.8	HIGH Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated atta…	CWE-88 Argument Injection	CVE-2019-3931	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220452	5.3	MEDIUM Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attack…	NVD-CWE-Other	CVE-2019-3928	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220453	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.…	CWE-287 Improper Authentication	CVE-2019-3927	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220454	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use thi…	CWE-78 OS Command	CVE-2019-3926	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220455	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this…	CWE-78 OS Command	CVE-2019-3925	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220456	9.8	CRITICAL Network	crestron barco extron teqavit sharp optoma blackbox infocus	am-100_firmware am-101_firmware wepresent_wipg-1000p_firmware wepresent_wipg-1600w_firmware sharelink_200_firmware sharelink_250_firmware wips710_firmware pn-l703wa_firmware w…	The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 fir…	CWE-787 Out-of-bounds Write	CVE-2019-3930	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220457	9.8	CRITICAL Network	crestron barco extron teqavit sharp optoma blackbox infocus	am-100_firmware am-101_firmware wepresent_wipg-1000p_firmware wepresent_wipg-1600w_firmware sharelink_200_firmware sharelink_250_firmware wips710_firmware pn-l703wa_firmware w…	The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 fir…	CWE-78 OS Command	CVE-2019-3929	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220458	7.5	HIGH Network	atlassian	jira jira_server	The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authoris…	CWE-862 Missing Authorization	CVE-2019-3399	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220459	9.8	CRITICAL Network	facebook	wangle	Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior to v2019.04.22.00	CWE-787 Out-of-bounds Write	CVE-2019-3563	2024-11-21 13:42	2019-04-30	Show	GitHub Exploit DB Packet Storm

220460	6.1	MEDIUM Network	oculus	oculus_browser	A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2…	CWE-79 Cross-site Scripting	CVE-2019-3562	2024-11-21 13:42	2019-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed