Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225971	4.6	警告	シスコシステムズ	-	Cisco Aggregation Services Router Route Processor 上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) 状態にされる脆弱性	CWE-399 リソース管理の問題	CVE-2013-1136	2013-05-14 14:52	2013-05-13	Show	GitHub Exploit DB Packet Storm

225972	10	危険	phpvms.net	-	phpVMS の admin/action.php における脆弱性	CWE-noinfo 情報不足	CVE-2012-6552	2013-05-14 12:00	2012-08-24	Show	GitHub Exploit DB Packet Storm

225973	9.3	危険	サムスン	-	MarkAny ContentSAFER MASetupCaller の ActiveX コントロールに脆弱性	CWE-94 コード・インジェクション	CVE-2012-2990	2013-05-13 17:59	2012-08-24	Show	GitHub Exploit DB Packet Storm

225974	4.3	警告	WPPA Opa Jaap	-	WordPress 用 WP Photo Album Plus プラグインの wp-admin/admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3254	2013-05-13 17:32	2013-05-6	Show	GitHub Exploit DB Packet Storm

225975	6.8	警告	NetWebLogic	-	WordPress 用 Login With Ajax プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2707	2013-05-13 17:31	2013-05-6	Show	GitHub Exploit DB Packet Storm

225976	5	警告	シスコシステムズ	-	Cisco Unified Presence のサーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-1242	2013-05-13 17:30	2013-05-7	Show	GitHub Exploit DB Packet Storm

225977	9.3	危険	DELL EMC (旧 EMC Corporation)	-	EMC AlphaStor の Library Control Program におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0946	2013-05-13 16:14	2013-05-9	Show	GitHub Exploit DB Packet Storm

225978	5.8	警告	DELL EMC (旧 EMC Corporation)	-	複数の EMC Documentum 製品における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0939	2013-05-13 16:12	2013-05-9	Show	GitHub Exploit DB Packet Storm

225979	4.3	警告	DELL EMC (旧 EMC Corporation)	-	複数の EMC Documentum 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0938	2013-05-13 15:54	2013-05-9	Show	GitHub Exploit DB Packet Storm

225980	5.8	警告	DELL EMC (旧 EMC Corporation)	-	複数の EMC Documentum 製品における Web セッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2013-0937	2013-05-13 15:53	2013-05-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196131	6.5	MEDIUM Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or…	NVD-CWE-noinfo	CVE-2021-21992	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

196132	7.8	HIGH Local	vmware	vcenter_server cloud_foundation	The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may explo…	NVD-CWE-noinfo	CVE-2021-21991	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

196133	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated att…	CWE-862 Missing Authorization	CVE-2021-22149	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

196134	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user ga…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-22148	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

196135	6.5	MEDIUM Network	elastic	elasticsearch	Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized …	CWE-862 Missing Authorization	CVE-2021-22147	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

196136	4.3	MEDIUM Network	gitlab	gitlab	An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.	CWE-863 Incorrect Authorization	CVE-2021-22239	2024-11-21 14:49	2021-09-10	Show	GitHub Exploit DB Packet Storm

196137	8.8	HIGH Network	ribbonsoft fedoraproject debian	dxflib extra_packages_for_enterprise_linux fedora debian_linux	A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can …	-	CVE-2021-21897	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

196138	6.4	MEDIUM Local	saltstack fedoraproject	salt fedora	An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This …	CWE-362 Race Condition	CVE-2021-22004	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

196139	7.5	HIGH Network	saltstack fedoraproject debian	salt fedora debian_linux	An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.	NVD-CWE-noinfo	CVE-2021-21996	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

196140	7.5	HIGH Network	vmware	identity_manager workspace_one_access cloud_foundation vrealize_suite_lifecycle_manager	VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute forc…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2021-22003	2024-11-21 14:49	2021-09-1	Show	GitHub Exploit DB Packet Storm