Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226121	4.7	警告	Linux	-	Linux Kernel の fs/namespace.c におけるファイルシステムの read-only プロパティを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1957	2013-04-26 16:12	2013-04-5	Show	GitHub Exploit DB Packet Storm

226122	3.5	注意	OpenStack Amazon.com, Inc.	-	複数の OpenStack 製品の v1 API における認証情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-1840	2013-04-26 15:15	2013-03-15	Show	GitHub Exploit DB Packet Storm

226123	4.3	警告	ヤフー株式会社	-	Yahoo!ブラウザーにおけるアドレスバー偽装の脆弱性	CWE-Other その他	CVE-2013-2307	2013-04-26 14:00	2013-04-26	Show	GitHub Exploit DB Packet Storm

226124	4.3	警告	jig.jp co., ltd.	-	Android 版 jigbrowser+ におけるアドレスバー偽装の脆弱性	CWE-Other その他	CVE-2013-2306	2013-04-26 14:00	2013-04-26	Show	GitHub Exploit DB Packet Storm

226125	6.8	警告	シスコシステムズ	-	Cisco IOS の Generic Input/Output コントロールの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-1217	2013-04-25 16:10	2013-04-19	Show	GitHub Exploit DB Packet Storm

226126	5	警告	シスコシステムズ	-	Cisco Unified Contact Center Express のスクリプトエディタにおける任意のスクリプトを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1214	2013-04-25 16:10	2013-04-19	Show	GitHub Exploit DB Packet Storm

226127	5	警告	シスコシステムズ	-	Cisco ASA デバイスおよび Cisco FWSM 上で稼働する time-based ACL の実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1195	2013-04-25 16:09	2013-04-22	Show	GitHub Exploit DB Packet Storm

226128	10	危険	Novell	-	Novell iManager における脆弱性	CWE-287 不適切な認証	CVE-2013-3268	2013-04-25 16:09	2013-04-10	Show	GitHub Exploit DB Packet Storm

226129	6.8	警告	Novell	-	Novell iManager で使用される Apache Tomcat におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-1088	2013-04-25 16:08	2013-04-10	Show	GitHub Exploit DB Packet Storm

226130	4.3	警告	IBM	-	IBM WebSphere Application Server の RPC アダプタにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0565	2013-04-25 16:01	2013-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195881	9.8	CRITICAL Network	eic	e-document_system	The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privi…	CWE-89 SQL Injection	CVE-2021-22859	2024-11-21 14:50	2021-03-17	Show	GitHub Exploit DB Packet Storm

195882	2.3	LOW Local	pulsesecure supermicro	psa-5000_firmware psa-7000_firmware x10slh-f_firmware x10sll-f_firmware x10slm-f_firmware x10sll\+f_firmware x10slm\+-f_firmware x10slm\+ln4f_firmware x10sla-f_firmware x10…	A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of a…	NVD-CWE-Other	CVE-2021-22887	2024-11-21 14:50	2021-03-17	Show	GitHub Exploit DB Packet Storm

195883	9.8	CRITICAL Network	schneider-electric	powerlogic_ion7400_firmware powerlogic_pm8000_firmware powerlogic_ion9000_firmware	A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the …	-	CVE-2021-22714	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195884	7.5	HIGH Network	schneider-electric	powerlogic_ion8650_firmware powerlogic_ion8800_firmware powerlogic_ion7550_firmware powerlogic_ion7650_firmware powerlogic_ion7700_firmware powerlogic_ion7300_firmware powerlogic_io…	A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security …	-	CVE-2021-22713	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195885	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22712	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195886	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22711	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195887	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22710	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195888	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which…	-	CVE-2021-22709	2024-11-21 14:50	2021-03-12	Show	GitHub Exploit DB Packet Storm

195889	4.8	MEDIUM Network	nextcloud fedoraproject	nextcloud_server fedora	Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `OC.Notification.show`.	CWE-79 Cross-site Scripting	CVE-2021-22878	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195890	6.5	MEDIUM Network	nextcloud fedoraproject	nextcloud_server fedora	A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.	CWE-862 Missing Authorization	CVE-2021-22877	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed