Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226491 7.5 危険 The Cacti Group - Cacti の snmp.php および rrd.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1435 2013-09-4 11:01 2013-08-6 Show GitHub Exploit DB Packet Storm
226492 7.5 危険 The Cacti Group - Cacti の api_poller.php および utility.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-1434 2013-09-4 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
226493 7.5 危険 アップル
サイバートラスト株式会社
pcre.org
レッドハット		 - PCRE ライブラリにおける正規表現の取り扱いに関する任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2007-1659 2013-09-2 18:40 2007-11-7 Show GitHub Exploit DB Packet Storm
226494 5 警告 株式会社ロックオン - EC-CUBE における Windows 環境でのディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-4702 2013-09-2 18:23 2013-08-30 Show GitHub Exploit DB Packet Storm
226495 6.8 警告 Id Software - ID-software などの製品で使用される libdigidoc における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-5648 2013-09-2 15:33 2013-08-22 Show GitHub Exploit DB Packet Storm
226496 5 警告 シスコシステムズ - Cisco IOS XR の RIP プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3470 2013-09-2 15:23 2013-08-29 Show GitHub Exploit DB Packet Storm
226497 4.6 警告 シスコシステムズ - Cisco UCS のファブリックインターコネクトデバイス上で稼働する CLI コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-3467 2013-09-2 14:59 2013-08-29 Show GitHub Exploit DB Packet Storm
226498 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスの protocol-inspection 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3463 2013-09-2 14:39 2013-08-30 Show GitHub Exploit DB Packet Storm
226499 4.3 警告 シスコシステムズ - Cisco Identity Services Engine ソフトウェアのゲストポータルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5744 2013-09-2 14:14 2013-08-29 Show GitHub Exploit DB Packet Storm
226500 6.8 警告 シスコシステムズ - Cisco Unified Communications Manager の Enterprise License Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3472 2013-09-2 12:31 2013-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195611 9.8 CRITICAL
Network 		appspace appspace Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-27670 2024-11-21 14:58 2021-02-25 Show GitHub Exploit DB Packet Storm
195612 2.5 LOW
Local 		gnu
fedoraproject
debian 		glibc
fedora
debian_linux 		The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting … CWE-415
 Double Free 		CVE-2021-27645 2024-11-21 14:58 2021-02-25 Show GitHub Exploit DB Packet Storm
195613 5.3 MEDIUM
Network 		rangerstudio directus In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability only affects products that are no longer… CWE-203
 Information Exposure Through Discrepancy 		CVE-2021-27583 2024-11-21 14:58 2021-02-24 Show GitHub Exploit DB Packet Storm
195614 9.1 CRITICAL
Network 		mitreid connect org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment (aka Autobinding) vulnerability. This ar… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-27582 2024-11-21 14:58 2021-02-24 Show GitHub Exploit DB Packet Storm
195615 7.8 HIGH
Local 		snowsoftware snow_inventory_agent Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exist… NVD-CWE-noinfo
CVE-2021-27579 2024-11-21 14:58 2021-02-24 Show GitHub Exploit DB Packet Storm
195616 5.5 MEDIUM
Local 		polarisoffice polaris_office Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someone must open a craft… CWE-369
 Divide By Zero 		CVE-2021-27550 2024-11-21 14:58 2021-02-24 Show GitHub Exploit DB Packet Storm
195617 5.9 MEDIUM
Network 		json-smart_project
oracle 		json-smart-v1
json-smart-v2
weblogic_server
utilities_framework
peoplesoft_enterprise_peopletools
communications_cloud_native_core_policy
oss_support_tools 		An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatExcepti… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2021-27568 2024-11-21 14:58 2021-02-23 Show GitHub Exploit DB Packet Storm
195618 5.4 MEDIUM
Network 		appspace appspace A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another memb… CWE-79
Cross-site Scripting 		CVE-2021-27564 2024-11-21 14:58 2021-02-23 Show GitHub Exploit DB Packet Storm
195619 5.3 MEDIUM
Network 		genymobile genymotion_desktop Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the S… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2021-27549 2024-11-21 14:58 2021-02-23 Show GitHub Exploit DB Packet Storm
195620 5.4 MEDIUM
Network 		monicahq monica The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field. CWE-79
Cross-site Scripting 		CVE-2021-27559 2024-11-21 14:58 2021-02-23 Show GitHub Exploit DB Packet Storm