Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225811 4.9 警告 マイクロソフト - Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3661 2013-05-29 16:54 2013-05-17 Show GitHub Exploit DB Packet Storm
225812 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2959 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
225813 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2957 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
225814 7.5 危険 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-2956 2013-05-29 16:36 2013-05-13 Show GitHub Exploit DB Packet Storm
225815 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2955 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
225816 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-2954 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
225817 4.3 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2013-2953 2013-05-29 16:30 2013-05-13 Show GitHub Exploit DB Packet Storm
225818 5.8 警告 シスコシステムズ - iOS 上で稼働する Cisco WebEx における SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6399 2013-05-29 16:30 2013-05-27 Show GitHub Exploit DB Packet Storm
225819 5 警告 Moodle - Moodle の lib/formslib.php におけるフォームデータのフィルタリングを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2083 2013-05-29 14:34 2013-05-21 Show GitHub Exploit DB Packet Storm
225820 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2082 2013-05-29 14:33 2013-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196331 8.8 HIGH
Network 		fortinet fortiweb An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x may allow a remote authenticated attacker to execute arbitrary commands … CWE-78
OS Command  		CVE-2021-22123 2024-11-21 14:49 2021-06-2 Show GitHub Exploit DB Packet Storm
196332 7.8 HIGH
Local 		vmware
oracle
netapp 		spring_framework
retail_order_broker
retail_predictive_application_server
enterprise_data_quality
retail_assortment_planning
retail_financial_integration
communications_network_inte… 		In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-22118 2024-11-21 14:49 2021-05-28 Show GitHub Exploit DB Packet Storm
196333 5.5 MEDIUM
Local 		huawei mate_30_firmware
mate_30_5g_firmware 		There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A module does not verify certain parameters s… NVD-CWE-noinfo
CVE-2021-22364 2024-11-21 14:49 2021-05-27 Show GitHub Exploit DB Packet Storm
196334 5.3 MEDIUM
Network 		huawei cloudengine_12800_firmware
cloudengine_5800_firmware
cloudengine_6800_firmware
cloudengine_7800_firmware 		There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the target device. Due to insufficient valid… CWE-787
 Out-of-bounds Write 		CVE-2021-22362 2024-11-21 14:49 2021-05-27 Show GitHub Exploit DB Packet Storm
196335 4.9 MEDIUM
Network 		huawei usg9500_firmware There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attacker needs to perform specific operations… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-22360 2024-11-21 14:49 2021-05-27 Show GitHub Exploit DB Packet Storm
196336 7.5 HIGH
Network 		huawei s5700_firmware
s6700_firmware 		There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 of S6700. An attacker could exploit this vulnerability by sending specific message to a ta… CWE-20
 Improper Input Validation  		CVE-2021-22359 2024-11-21 14:49 2021-05-27 Show GitHub Exploit DB Packet Storm
196337 4.3 MEDIUM
Network 		huawei fusioncompute There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insufficient, an attacker can exploit this vulnerability to upload any files to the devi… CWE-20
 Improper Input Validation  		CVE-2021-22358 2024-11-21 14:49 2021-05-27 Show GitHub Exploit DB Packet Storm
196338 9.8 CRITICAL
Network 		vmware vcenter_server
cloud_foundation 		The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availab… CWE-306
Missing Authentication for Critical Function 		CVE-2021-21986 2024-11-21 14:49 2021-05-27 Show GitHub Exploit DB Packet Storm
196339 9.8 CRITICAL
Network 		vmware vcenter_server
cloud_foundation 		The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A mali… CWE-20
 Improper Input Validation  		CVE-2021-21985 2024-11-21 14:49 2021-05-27 Show GitHub Exploit DB Packet Storm
196340 9.8 CRITICAL
Network 		apache pulsar If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the signature of the token is not validated if the algorithm of the presented token is set to "none… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2021-22160 2024-11-21 14:49 2021-05-26 Show GitHub Exploit DB Packet Storm