Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226101	5	警告	Blink Web Effects	-	WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性	CWE-noinfo 情報不足	CVE-2013-1949	2013-04-30 17:51	2013-04-9	Show	GitHub Exploit DB Packet Storm

226102	10	危険	Rob Westgeest	-	Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-1948	2013-04-30 17:51	2013-04-10	Show	GitHub Exploit DB Packet Storm

226103	9.3	危険	Kelly D. Redding	-	Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1947	2013-04-30 17:50	2013-04-4	Show	GitHub Exploit DB Packet Storm

226104	9.3	危険	karteek-docsplit	-	Ruby 用 Karteek Docsplit gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1933	2013-04-30 17:49	2013-04-1	Show	GitHub Exploit DB Packet Storm

226105	6.8	警告	Novell plataformatec	-	Ruby 用 Devise gem における不正な結果が返される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0233	2013-04-30 17:48	2013-01-28	Show	GitHub Exploit DB Packet Storm

226106	7.5	危険	Grape Erik Michaels-Ober	-	Grape などの製品で使用される Ruby 用 multi_xml gem におけるオブジェクトインジェクション攻撃を誘発される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0175	2013-04-30 17:43	2013-01-10	Show	GitHub Exploit DB Packet Storm

226107	5	警告	Ruby-lang.org	-	Ruby における safe-level の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4466	2013-04-30 17:29	2012-10-3	Show	GitHub Exploit DB Packet Storm

226108	5	警告	Ruby-lang.org	-	Ruby における safe-level の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4464	2013-04-30 17:25	2012-10-3	Show	GitHub Exploit DB Packet Storm

226109	5.4	警告	シトリックス・システムズ	-	NetScaler Access Gateway Enterprise Edition に脆弱性	CWE-noinfo 情報不足	CVE-2013-2767	2013-04-30 12:45	2013-04-26	Show	GitHub Exploit DB Packet Storm

226110	9.3	危険	シスコシステムズ	-	Cisco MDS 9000 および Nexus 5000 デバイス用 Cisco Device Manager における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1192	2013-04-26 16:56	2013-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195881	9.8	CRITICAL Network	eic	e-document_system	The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privi…	CWE-89 SQL Injection	CVE-2021-22859	2024-11-21 14:50	2021-03-17	Show	GitHub Exploit DB Packet Storm

195882	2.3	LOW Local	pulsesecure supermicro	psa-5000_firmware psa-7000_firmware x10slh-f_firmware x10sll-f_firmware x10slm-f_firmware x10sll\+f_firmware x10slm\+-f_firmware x10slm\+ln4f_firmware x10sla-f_firmware x10…	A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of a…	NVD-CWE-Other	CVE-2021-22887	2024-11-21 14:50	2021-03-17	Show	GitHub Exploit DB Packet Storm

195883	9.8	CRITICAL Network	schneider-electric	powerlogic_ion7400_firmware powerlogic_pm8000_firmware powerlogic_ion9000_firmware	A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the …	-	CVE-2021-22714	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195884	7.5	HIGH Network	schneider-electric	powerlogic_ion8650_firmware powerlogic_ion8800_firmware powerlogic_ion7550_firmware powerlogic_ion7650_firmware powerlogic_ion7700_firmware powerlogic_ion7300_firmware powerlogic_io…	A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security …	-	CVE-2021-22713	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195885	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22712	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195886	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22711	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195887	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22710	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195888	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22709	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195889	4.8	MEDIUM Network	nextcloud fedoraproject	nextcloud_server fedora	Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `OC.Notification.show`.	CWE-79 Cross-site Scripting	CVE-2021-22878	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195890	6.5	MEDIUM Network	nextcloud fedoraproject	nextcloud_server fedora	A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.	CWE-862 Missing Authorization	CVE-2021-22877	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed