Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225381	4.3	警告	IBM	-	IBM Sterling B2B Integrator および Sterling File Gateway におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0455	2013-07-3 15:56	2013-06-6	Show	GitHub Exploit DB Packet Storm

225382	4.3	警告	シスコシステムズ	-	Cisco TelePresence TC ソフトウェアの SIP の実装における意図しない NOTIFY メッセージの使用を誘発される脆弱性	CWE-noinfo 情報不足	CVE-2013-3401	2013-07-3 15:48	2013-07-1	Show	GitHub Exploit DB Packet Storm

225383	6.6	警告	シスコシステムズ	-	Cisco Desktop Collaboration Experience DX650 の不特定の Android API におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3399	2013-07-3 15:45	2013-07-1	Show	GitHub Exploit DB Packet Storm

225384	6.8	警告	シスコシステムズ	-	複数の Cisco セキュリティアプライアンスの Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3395	2013-07-3 15:36	2013-07-1	Show	GitHub Exploit DB Packet Storm

225385	5.8	警告	Atlassian	-	Atlassian Crowd における任意のファイルを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2013-3925	2013-07-3 15:16	2013-06-19	Show	GitHub Exploit DB Packet Storm

225386	6.8	警告	Services project	-	Drupal 用 Services モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2158	2013-07-3 14:56	2013-06-5	Show	GitHub Exploit DB Packet Storm

225387	6.9	警告	FreeBSD	-	FreeBSD のカーネルにおけるファイルシステムの書き込み権限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2171	2013-07-3 13:55	2013-06-18	Show	GitHub Exploit DB Packet Storm

225388	10	危険	Digital Alert Systems Monroe Electronics	-	Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS におけるアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4735	2013-07-2 16:52	2013-04-24	Show	GitHub Exploit DB Packet Storm

225389	7.5	危険	Digital Alert Systems Monroe Electronics	-	Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における非管理者アクセス権を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-4734	2013-07-2 16:50	2013-04-24	Show	GitHub Exploit DB Packet Storm

225390	7.8	危険	Digital Alert Systems Monroe Electronics	-	Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4733	2013-07-2 16:49	2013-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197311	7.2	HIGH Network	ibm	resilient	IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759.	CWE-77 Command Injection	CVE-2021-20527	2024-11-21 14:46	2021-04-20	Show	GitHub Exploit DB Packet Storm

197312	4.4	MEDIUM Local	ibm	spectrum_protect	IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper param…	CWE-787 Out-of-bounds Write	CVE-2021-20491	2024-11-21 14:46	2021-04-17	Show	GitHub Exploit DB Packet Storm

197313	7.5	HIGH Network	mitsubishielectric	got2000_gt27_firmware got2000_gt25_firmware gt2107-wtbd_firmware gt2107-wtsd_firmware gs2110-wtbd-n_firmware gs2107-wtbd-n_firmware	Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 mode…	CWE-287 Improper Authentication	CVE-2021-20590	2024-11-21 14:46	2021-04-23	Show	GitHub Exploit DB Packet Storm

197314	7.2	HIGH Network	linuxfoundation redhat fedoraproject debian	ceph ceph_storage fedora debian_linux	An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who …	CWE-287 Improper Authentication	CVE-2021-20288	2024-11-21 14:46	2021-04-16	Show	GitHub Exploit DB Packet Storm

197315	5.4	MEDIUM Network	ibm	rational_quality_manager rational_team_concert rational_engineering_lifecycle_manager rhapsody_model_manager collaborative_lifecycle_management engineering_test_management engineeri…	IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potenti…	CWE-79 Cross-site Scripting	CVE-2021-20519	2024-11-21 14:46	2021-04-13	Show	GitHub Exploit DB Packet Storm

197316	6.5	MEDIUM Network	ibm	websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vuln…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-20480	2024-11-21 14:46	2021-04-8	Show	GitHub Exploit DB Packet Storm

197317	7.8	HIGH Local	mongodb	compass	A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the user who is running MongoDB Compass. This i…	CWE-269 Improper Privilege Management	CVE-2021-20334	2024-11-21 14:46	2021-04-7	Show	GitHub Exploit DB Packet Storm

197318	9.8	CRITICAL Network	htmldoc_project debian	htmldoc debian_linux	Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181.	-	CVE-2021-20308	2024-11-21 14:46	2021-04-6	Show	GitHub Exploit DB Packet Storm

197319	9.8	CRITICAL Network	libpano13_project fedoraproject debian	libpano13 fedora debian_linux	Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.	-	CVE-2021-20307	2024-11-21 14:46	2021-04-6	Show	GitHub Exploit DB Packet Storm

197320	8.1	HIGH Network	nettle_project redhat fedoraproject netapp debian	nettle enterprise_linux fedora ontap_select_deploy_administration_utility active_iq_unified_manager debian_linux	A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply fun…	CWE-787 Out-of-bounds Write	CVE-2021-20305	2024-11-21 14:46	2021-04-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed