Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224251 5 警告 ヒューレット・パッカード - 複数の HP LaserJet プリンタ製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-6193 2013-12-20 19:02 2013-12-12 Show GitHub Exploit DB Packet Storm
224252 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-2865 2013-12-20 18:49 2013-06-4 Show GitHub Exploit DB Packet Storm
224253 4.3 警告 GNOME Project - GNOME Office Gnumeric の plugins/excel/ms-escher.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-6836 2013-12-20 18:47 2013-11-20 Show GitHub Exploit DB Packet Storm
224254 7.5 危険 Zabbix - Zabbix における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-6824 2013-12-20 18:44 2013-12-3 Show GitHub Exploit DB Packet Storm
224255 4.3 警告 Stephane Caron - prettyPhoto の js/jquery.prettyPhoto.js 内の setTimeout 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6837 2013-12-20 18:38 2013-01-14 Show GitHub Exploit DB Packet Storm
224256 5 警告 シスコシステムズ - Cisco ONS 15454 デバイス上で稼働する Transport Node Controller の tNetTaskLimit プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6701 2013-12-20 18:36 2013-12-17 Show GitHub Exploit DB Packet Storm
224257 7.8 危険 ネットギア - 複数の NETGEAR ProSafe スイッチ製品のファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-4776 2013-12-20 18:24 2013-08-21 Show GitHub Exploit DB Packet Storm
224258 10 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-2863 2013-12-20 18:24 2013-06-4 Show GitHub Exploit DB Packet Storm
224259 7.8 危険 ネットギア - 複数の NETGEAR ProSafe スイッチ製品のファームウェアにおける暗号化された管理者の認証情報を読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-4775 2013-12-20 18:24 2013-08-21 Show GitHub Exploit DB Packet Storm
224260 7.5 危険 Google - Google Chrome で使用される Skia におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-2862 2013-12-20 18:23 2013-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199661 8.8 HIGH
Network
sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2021-21449 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
199662 6.5 MEDIUM
Local
sap graphical_user_interface SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can acce… NVD-CWE-noinfo
CVE-2021-21448 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
199663 5.4 MEDIUM
Network
sap businessobjects_business_intelligence SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, w… CWE-79
Cross-site Scripting
CVE-2021-21447 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
199664 7.5 HIGH
Network
sap netweaver_application_server_abap SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service,… NVD-CWE-noinfo
CVE-2021-21446 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
199665 5.4 MEDIUM
Network
sap commerce_cloud SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, a… CWE-444
HTTP Request Smuggling
CVE-2021-21445 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
199666 8.8 HIGH
Network
mk-auth mk-auth MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI. CWE-352
 Origin Validation Error
CVE-2021-21495 2024-11-21 14:48 2021-01-4 Show GitHub Exploit DB Packet Storm
199667 4.8 MEDIUM
Network
mk-auth mk-auth MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (session token) cookie, which is not set to HTTPOnly. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2021-21494 2024-11-21 14:48 2021-01-4 Show GitHub Exploit DB Packet Storm
199668 7.8 HIGH
Local
adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated atta… - CVE-2021-21088 2024-11-21 14:47 2023-09-6 Show GitHub Exploit DB Packet Storm
199669 5.4 MEDIUM
Network
google chrome Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chrome security severity: Low) CWE-125
Out-of-bounds Read
CVE-2021-21200 2024-11-21 14:47 2023-01-3 Show GitHub Exploit DB Packet Storm
199670 6.1 MEDIUM
Network
netgate
pfsense
pfsense_plus
pfsense
Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a remote attacker to in… CWE-79
Cross-site Scripting
CVE-2021-20729 2024-11-21 14:47 2022-03-31 Show GitHub Exploit DB Packet Storm