Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256361 4.7 警告 マイクロソフト - Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0481 2010-05-11 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
256362 4.9 警告 マイクロソフト - Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-noinfo
CVE-2010-0238 2010-05-11 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
256363 6.9 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0237 2010-05-11 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
256364 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0236 2010-05-11 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
256365 4.7 警告 マイクロソフト - Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0235 2010-05-11 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
256366 4.7 警告 マイクロソフト - Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0234 2010-05-11 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
256367 9.3 危険 マイクロソフト - Microsoft Windows Media Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0268 2010-05-10 19:11 2010-04-13 Show GitHub Exploit DB Packet Storm
256368 9.3 危険 マイクロソフト - Microsoft Windows の MPEG Layer-3 オーディオコーデックにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0480 2010-05-10 19:11 2010-04-13 Show GitHub Exploit DB Packet Storm
256369 9.3 危険 マイクロソフト - Microsoft Windows の Media Services におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0478 2010-05-10 19:10 2010-04-13 Show GitHub Exploit DB Packet Storm
256370 10 危険 マイクロソフト - Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0477 2010-05-10 19:10 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195381 6.5 MEDIUM
Local 		qualcomm qca6391_firmware
qcm6490_firmware
qcs6490_firmware
qrb5165_firmware
qrb5165n_firmware
sd690_5g_firmware
sd750g_firmware
sd765_firmware
sd765g_firmware
sd768g_firmware
sd… 		Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-1918 2024-11-21 14:45 2022-01-3 Show GitHub Exploit DB Packet Storm
195382 7.8 HIGH
Local 		qualcomm ar8031_firmware
ar8035_firmware
csra6620_firmware
csra6640_firmware
csrb31024_firmware
fsm10055_firmware
fsm10056_firmware
mdm9150_firmware
mdm9205_firmware
mdm9628_firmwar… 		Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-1894 2024-11-21 14:45 2022-01-3 Show GitHub Exploit DB Packet Storm
195383 8.8 HIGH
Adjacent 		dlink dir-2640-us_firmware Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those… CWE-798
 Use of Hard-coded Credentials 		CVE-2021-20132 2024-11-21 14:45 2021-12-31 Show GitHub Exploit DB Packet Storm
195384 8.4 HIGH
Adjacent 		dlink dir-2640-us_firmware Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file… CWE-22
Path Traversal 		CVE-2021-20134 2024-11-21 14:45 2021-12-31 Show GitHub Exploit DB Packet Storm
195385 6.1 MEDIUM
Adjacent 		dlink dir-2640-us_firmware Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of t… CWE-22
Path Traversal 		CVE-2021-20133 2024-11-21 14:45 2021-12-31 Show GitHub Exploit DB Packet Storm
195386 7.5 HIGH
Network 		sonicwall sma_100_firmware
sma_200_firmware
sma_210_firmware
sma_400_firmware
sma_410_firmware
sma_500v_firmware 		An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data. NVD-CWE-Other
CVE-2021-20050 2024-11-21 14:45 2021-12-23 Show GitHub Exploit DB Packet Storm
195387 7.5 HIGH
Network 		sonicwall sma_100_firmware
sma_200_firmware
sma_210_firmware
sma_400_firmware
sma_410_firmware
sma_500v_firmware 		A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.… CWE-203
 Information Exposure Through Discrepancy 		CVE-2021-20049 2024-11-21 14:45 2021-12-23 Show GitHub Exploit DB Packet Storm
195388 8.8 HIGH
Adjacent 		gryphonconnect gryphon_tower_firmware An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same ne… CWE-78
OS Command  		CVE-2021-20139 2024-11-21 14:45 2021-12-10 Show GitHub Exploit DB Packet Storm
195389 8.8 HIGH
Adjacent 		gryphonconnect gryphon_tower_firmware An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenticated remote attacker on the same networ… CWE-78
OS Command  		CVE-2021-20138 2024-11-21 14:45 2021-12-10 Show GitHub Exploit DB Packet Storm
195390 6.1 MEDIUM
Network 		gryphonconnect gryphon_tower_firmware A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by … CWE-79
Cross-site Scripting 		CVE-2021-20137 2024-11-21 14:45 2021-12-10 Show GitHub Exploit DB Packet Storm