Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224291 5 警告 株式会社ロックオン - EC-CUBE における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2013-5994 2014-01-30 18:32 2013-11-20 Show GitHub Exploit DB Packet Storm
224292 6.4 警告 株式会社ロックオン - EC-CUBE におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2314 2014-01-30 18:31 2013-05-23 Show GitHub Exploit DB Packet Storm
224293 6 警告 Chamilo Association - Chamilo LMS の main/auth/profile.php の check_user_password 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6787 2014-01-30 15:53 2013-11-6 Show GitHub Exploit DB Packet Storm
224294 5 警告 Easytime Studio - iOS 用 Easytime Studio Easy File Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3921 2014-01-30 15:52 2013-11-21 Show GitHub Exploit DB Packet Storm
224295 7.5 危険 Doug Poulin - Command School Student Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1636 2014-01-30 14:46 2014-01-7 Show GitHub Exploit DB Packet Storm
224296 5 警告 Doug Poulin - Command School Student Management System におけるデータベースのバックアップをダウンロードされる脆弱性 CWE-200
情報漏えい 		CVE-2014-1637 2014-01-30 14:45 2014-01-7 Show GitHub Exploit DB Packet Storm
224297 9.3 危険 ジャストシステム - 三四郎シリーズにおいて任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		CVE-2014-0810 2014-01-30 14:24 2014-01-28 Show GitHub Exploit DB Packet Storm
224298 6.5 警告 サイボウズ - サイボウズ ガルーンにおける複数の SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6930
CVE-2013-6931 		2014-01-30 14:20 2014-01-28 Show GitHub Exploit DB Packet Storm
224299 7.1 危険 ジュニパーネットワークス - Juniper Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2014-0616 2014-01-30 14:18 2014-01-8 Show GitHub Exploit DB Packet Storm
224300 7.2 危険 ジュニパーネットワークス - Juniper Junos における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0615 2014-01-30 14:16 2014-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197781 5.5 MEDIUM
Local 		trendmicro apex_central
apex_one
cloud_edge
deep_security
control_manager
deep_discovery_analyzer
deep_discovery_email_inspector
deep_discovery_inspector
interscan_messaging_security_vir… 		Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by a… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25252 2024-11-21 14:54 2021-03-4 Show GitHub Exploit DB Packet Storm
197782 7.8 HIGH
Local 		saltstack salt CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify… - CVE-2021-25315 2024-11-21 14:54 2021-03-3 Show GitHub Exploit DB Packet Storm
197783 7.5 HIGH
Network 		google android Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider. NVD-CWE-noinfo
CVE-2021-25330 2024-11-21 14:54 2021-03-3 Show GitHub Exploit DB Packet Storm
197784 9.8 CRITICAL
Network 		gigaset dx600a_firmware The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password p… CWE-307
CWE-521
mproper Restriction of Excessive Authentication Attempts
Weak Password Requirements  		CVE-2021-25309 2024-11-21 14:54 2021-03-2 Show GitHub Exploit DB Packet Storm
197785 7.5 HIGH
Network 		gigaset dx600a_firmware A buffer overflow vulnerability in the AT command interface of Gigaset DX600A v41.00-175 devices allows remote attackers to force a device reboot by sending relatively long AT commands. CWE-120
Classic Buffer Overflow 		CVE-2021-25306 2024-11-21 14:54 2021-03-2 Show GitHub Exploit DB Packet Storm
197786 7.0 HIGH
Local 		apache
debian
oracle 		tomcat
debian_linux
managed_file_transfer
instantis_enterprisetrack
agile_plm
database
siebel_ui_framework
mysql_enterprise_monitor
graph_server_and_client
communications_c… 		The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikel… NVD-CWE-noinfo
CVE-2021-25329 2024-11-21 14:54 2021-03-1 Show GitHub Exploit DB Packet Storm
197787 7.5 HIGH
Network 		apache
debian
oracle 		tomcat
debian_linux
managed_file_transfer
instantis_enterprisetrack
agile_plm
database
siebel_ui_framework
mysql_enterprise_monitor
graph_server_and_client
communications_c… 		When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body… CWE-200
Information Exposure 		CVE-2021-25122 2024-11-21 14:54 2021-03-1 Show GitHub Exploit DB Packet Storm
197788 4.4 MEDIUM
Local 		saltstack
fedoraproject
debian 		salt
fedora
debian_linux 		An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level. CWE-532
CWE-522
 Inclusion of Sensitive Information in Log Files
 Insufficiently Protected Credentials 		CVE-2021-25284 2024-11-21 14:54 2021-02-27 Show GitHub Exploit DB Packet Storm
197789 9.8 CRITICAL
Network 		saltstack
fedoraproject
debian 		salt
fedora
debian_linux 		An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks. CWE-94
Code Injection 		CVE-2021-25283 2024-11-21 14:54 2021-02-27 Show GitHub Exploit DB Packet Storm
197790 9.1 CRITICAL
Network 		saltstack
fedoraproject
debian 		salt
fedora
debian_linux 		An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal. CWE-22
Path Traversal 		CVE-2021-25282 2024-11-21 14:54 2021-02-27 Show GitHub Exploit DB Packet Storm