Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
132371	7.5	重要 Network	Compass Plus	TranzWare e-Commerce Payment Gateway	TranzWare e-Commerce Payment Gateway における XML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2021-28110	2021-12-2 18:08	2021-03-17	Show	GitHub Exploit DB Packet Storm

132372	5.5	警告 Local	Linux Fedora Project	Linux Kernel Fedora	Linux Kernel における過度なイテレーションの脆弱性	CWE-834 過度なイテレーション	CVE-2021-28950	2021-12-2 18:08	2021-03-20	Show	GitHub Exploit DB Packet Storm

132373	7.5	重要 Network	Schema-Inspector project	Schema-Inspector	Schema-Inspector におけるリソースの枯渇に関する脆弱性	CWE-20 CWE-400	CVE-2021-21267	2021-12-2 18:08	2021-03-14	Show	GitHub Exploit DB Packet Storm

132374	9.8	緊急 Network	http-proxy-agent project Fedora Project レッドハット	Red Hat Enterprise Linux http-proxy-agent Red Hat Software Collections Fedora	http-proxy-agent における初期化に関する脆弱性	CWE-665 不適切な初期化	CVE-2019-10196	2021-12-2 18:08	2019-06-12	Show	GitHub Exploit DB Packet Storm

132375	8.6	重要 Network	Debian Squid-cache.org	Debian GNU/Linux Squid	Squid における HTTP リクエストスマグリングに関する脆弱性	CWE-20 CWE-444	CVE-2020-25097	2021-12-2 18:08	2020-09-4	Show	GitHub Exploit DB Packet Storm

132376	6.1	警告 Network	AlgolPlus	Advanced Order Export For WooCommerce	WooCommerce 用 Advanced Order Export におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-27349	2021-12-2 18:05	2021-02-22	Show	GitHub Exploit DB Packet Storm

132377	8.8	重要 Network	PortProcesses project	PortProcesses	portprocesses パッケージにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2021-23348	2021-12-2 18:05	2021-03-31	Show	GitHub Exploit DB Packet Storm

132378	8.8	重要 Network	accusoft	imagegear	Accusoft ImageGear における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-21782	2021-12-2 18:05	2021-03-30	Show	GitHub Exploit DB Packet Storm

132379	7.2	重要 Network	Simple College Website project	Simple College Website	Simple College Website における危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2020-28173	2021-12-2 18:05	2020-10-30	Show	GitHub Exploit DB Packet Storm

132380	9.8	緊急 Network	Simple College Website project	Simple College Website	Simple College Website における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2020-28172	2021-12-2 18:05	2020-10-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356861	-	gnu	gzip	Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.	NVD-CWE-Other	CVE-2001-1228	2008-09-11 04:09	2001-11-18	Show	GitHub Exploit DB Packet Storm

356862	-	derek_leung	pslash	pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.	NVD-CWE-Other	CVE-2001-1235	2008-09-11 04:09	2001-10-2	Show	GitHub Exploit DB Packet Storm

356863	-	sebastian_bunka	myphppagetool	myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.	NVD-CWE-Other	CVE-2001-1236	2008-09-11 04:09	2001-10-2	Show	GitHub Exploit DB Packet Storm

356864	-	ibm	aix_snmp	AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.	NVD-CWE-Other	CVE-2001-0487	2008-09-11 04:08	2001-06-27	Show	GitHub Exploit DB Packet Storm

356865	-	oracle	oracle8i	Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offse…	NVD-CWE-Other	CVE-2001-0498	2008-09-11 04:08	2001-07-21	Show	GitHub Exploit DB Packet Storm

356866	-	oracle	database_server oracle8i	Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.	NVD-CWE-Other	CVE-2001-0515	2008-09-11 04:08	2001-07-21	Show	GitHub Exploit DB Packet Storm

356867	-	oracle	oracle8i oracle9i	Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does no…	NVD-CWE-Other	CVE-2001-0516	2008-09-11 04:08	2001-07-21	Show	GitHub Exploit DB Packet Storm

356868	-	lucent merit	radius	Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.	NVD-CWE-Other	CVE-2001-0534	2008-09-11 04:08	2001-07-21	Show	GitHub Exploit DB Packet Storm

356869	-	nedit	nedit	The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or p…	NVD-CWE-Other	CVE-2001-0556	2008-09-11 04:08	2001-08-22	Show	GitHub Exploit DB Packet Storm

356870	-	hughes_technologies	dsl_vdns	Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection.	NVD-CWE-Other	CVE-2001-0580	2008-09-11 04:08	2001-08-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed