Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225401	5	警告	Imperva Inc.	-	Imperva SecureSphere の SecureSphere Operations Manager Management Server における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-4092	2013-07-2 16:26	2013-06-2	Show	GitHub Exploit DB Packet Storm

225402	7.5	危険	Imperva Inc.	-	Imperva SecureSphere の SecureSphere Operations Manager Management Server におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-4091	2013-07-2 16:15	2013-06-2	Show	GitHub Exploit DB Packet Storm

225403	7.5	危険	Indra	-	EDItran Communications Platform の editcp におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-5288	2013-07-2 16:08	2010-06-25	Show	GitHub Exploit DB Packet Storm

225404	6.8	警告	JS-YAML Project	-	Node.js 用 JS-YAML モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-4660	2013-07-2 16:07	2013-06-23	Show	GitHub Exploit DB Packet Storm

225405	2.1	注意	X.Org Foundation Canonical	-	X.Org X Server における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1940	2013-07-2 16:01	2013-04-10	Show	GitHub Exploit DB Packet Storm

225406	6.8	警告	Novell Canonical レッドハット	-	IcedTea-Web プラグインにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-1927	2013-07-2 15:58	2013-04-17	Show	GitHub Exploit DB Packet Storm

225407	5.8	警告	Novell Canonical レッドハット	-	IcedTea-Web プラグインにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-1926	2013-07-2 15:56	2013-04-17	Show	GitHub Exploit DB Packet Storm

225408	4.3	警告	KENT-WEB	-	CLIP-MAIL におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3649	2013-07-2 15:51	2013-06-27	Show	GitHub Exploit DB Packet Storm

225409	4.3	警告	KENT-WEB	-	POST-MAIL におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3648	2013-07-2 15:42	2013-06-27	Show	GitHub Exploit DB Packet Storm

225410	6	警告	ヒューレット・パッカード	-	HP NonStop サーバ上で稼働する HP NonStop SQL/MX におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2323	2013-07-2 14:58	2013-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197021	7.2	HIGH Network	prestashop	prestashop	PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. T…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2021-21302	2024-11-21 14:47	2021-02-27	Show	GitHub Exploit DB Packet Storm

197022	6.5	MEDIUM Network	matrix fedoraproject	synapse fedora	Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a mal…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2021-21274	2024-11-21 14:47	2021-02-27	Show	GitHub Exploit DB Packet Storm

197023	6.1	MEDIUM Network	matrix fedoraproject	synapse fedora	Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, reque…	CWE-601 Open Redirect	CVE-2021-21273	2024-11-21 14:47	2021-02-27	Show	GitHub Exploit DB Packet Storm

197024	6.5	MEDIUM Network	nodered	node-red	Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the Projects API. If the …	-	CVE-2021-21298	2024-11-21 14:47	2021-02-27	Show	GitHub Exploit DB Packet Storm

197025	6.5	MEDIUM Network	nodered	node-red	Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A badly formed request c…	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-21297	2024-11-21 14:47	2021-02-27	Show	GitHub Exploit DB Packet Storm

197026	7.8	HIGH Local	adobe	bridge	Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Ex…	-	CVE-2021-21066	2024-11-21 14:47	2021-02-25	Show	GitHub Exploit DB Packet Storm

197027	7.8	HIGH Local	adobe	bridge	Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Ex…	-	CVE-2021-21065	2024-11-21 14:47	2021-02-25	Show	GitHub Exploit DB Packet Storm

197028	4.9	MEDIUM Network	magento	upward_php upward_connector	Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the upload feature. An attacker could poten…	-	CVE-2021-21064	2024-11-21 14:47	2021-02-25	Show	GitHub Exploit DB Packet Storm

197029	8.8	HIGH Network	microsoft fedoraproject google	edge edge_chromium fedora chrome	Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-416 Use After Free	CVE-2021-21157	2024-11-21 14:47	2021-02-23	Show	GitHub Exploit DB Packet Storm

197030	8.8	HIGH Network	google fedoraproject	chrome fedora	Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.	CWE-787 Out-of-bounds Write	CVE-2021-21156	2024-11-21 14:47	2021-02-23	Show	GitHub Exploit DB Packet Storm