Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225851	4.3	警告	sahotataran	-	Vanilla Forums 用の LatestComment プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6555	2013-05-27 15:40	2013-05-23	Show	GitHub Exploit DB Packet Storm

225852	6.5	警告	activeCollab	-	activeCollab 用の Chat モジュールにおける任意の PHP コードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-6554	2013-05-27 15:36	2012-05-16	Show	GitHub Exploit DB Packet Storm

225853	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1021	2013-05-27 15:27	2013-05-22	Show	GitHub Exploit DB Packet Storm

225854	9.3	危険	アップル	-	Apple QuickTime における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-1020	2013-05-27 15:24	2013-05-22	Show	GitHub Exploit DB Packet Storm

225855	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1017	2013-05-27 15:13	2013-05-22	Show	GitHub Exploit DB Packet Storm

225856	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1016	2013-05-27 15:09	2013-05-22	Show	GitHub Exploit DB Packet Storm

225857	9.3	危険	アップル	-	Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-1015	2013-05-27 15:04	2013-05-22	Show	GitHub Exploit DB Packet Storm

225858	4.3	警告	ヤフー株式会社	-	Yahoo!ブラウザーにおけるアドレスバー偽装の脆弱性	CWE-Other その他	CVE-2013-2316	2013-05-27 12:01	2013-05-27	Show	GitHub Exploit DB Packet Storm

225859	4.3	警告	Eclipse Foundation IBM レッドハット	-	Eclipse IDE の Eclipse Help Contents Web Application におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4647	2013-05-24 17:58	2011-01-13	Show	GitHub Exploit DB Packet Storm

225860	4.3	警告	Eclipse Foundation IBM	-	Eclipse IDE の Help Contents Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7271	2013-05-24 17:55	2011-01-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196131	6.5	MEDIUM Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or…	NVD-CWE-noinfo	CVE-2021-21992	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

196132	7.8	HIGH Local	vmware	vcenter_server cloud_foundation	The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may explo…	NVD-CWE-noinfo	CVE-2021-21991	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

196133	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated att…	CWE-862 Missing Authorization	CVE-2021-22149	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

196134	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user ga…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-22148	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

196135	6.5	MEDIUM Network	elastic	elasticsearch	Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized …	CWE-862 Missing Authorization	CVE-2021-22147	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

196136	4.3	MEDIUM Network	gitlab	gitlab	An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.	CWE-863 Incorrect Authorization	CVE-2021-22239	2024-11-21 14:49	2021-09-10	Show	GitHub Exploit DB Packet Storm

196137	8.8	HIGH Network	ribbonsoft fedoraproject debian	dxflib extra_packages_for_enterprise_linux fedora debian_linux	A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can …	-	CVE-2021-21897	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

196138	6.4	MEDIUM Local	saltstack fedoraproject	salt fedora	An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This …	CWE-362 Race Condition	CVE-2021-22004	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

196139	7.5	HIGH Network	saltstack fedoraproject debian	salt fedora debian_linux	An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.	NVD-CWE-noinfo	CVE-2021-21996	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

196140	7.5	HIGH Network	vmware	identity_manager workspace_one_access cloud_foundation vrealize_suite_lifecycle_manager	VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute forc…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2021-22003	2024-11-21 14:49	2021-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed