Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227951	5	警告	zeuscms	-	ZeusCMS における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0681	2012-12-20 19:28	2010-02-22	Show	GitHub Exploit DB Packet Storm

227952	7.5	危険	zeuscms	-	ZeusCMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0680	2012-12-20 19:28	2010-02-22	Show	GitHub Exploit DB Packet Storm

227953	5	警告	weberr	-	Joomla! 用の RWCards コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0676	2012-12-20 19:28	2010-02-22	Show	GitHub Exploit DB Packet Storm

227954	7.5	危険	webmastersite	-	WSN Guest の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0672	2012-12-20 19:28	2010-02-22	Show	GitHub Exploit DB Packet Storm

227955	5	警告	xs4all	-	JAG における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0665	2012-12-20 19:28	2010-02-19	Show	GitHub Exploit DB Packet Storm

227956	7.5	危険	flex project	-	Fast Lexical Analyzer Generator における脆弱性	CWE-noinfo 情報不足	CVE-2010-0634	2012-12-20 19:28	2010-02-12	Show	GitHub Exploit DB Packet Storm

227957	7.5	危険	webguerilla	-	Joomla! 用の Photoblog コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0610	2012-12-20 19:28	2010-02-11	Show	GitHub Exploit DB Packet Storm

227958	4.3	警告	sterlitetechnologies	-	Sterlite SAM300 AX Router の Forms/status_statistics_1 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0607	2012-12-20 19:28	2010-02-11	Show	GitHub Exploit DB Packet Storm

227959	7.5	危険	サン・マイクロシステムズ	-	Oracle OpenSolaris のデフォルト設定における脆弱性	CWE-16 環境設定	CVE-2010-0559	2012-12-20 19:28	2010-01-25	Show	GitHub Exploit DB Packet Storm

227960	7.5	危険	サン・マイクロシステムズ	-	Oracle OpenSolaris のデフォルト設定における脆弱性	CWE-16 環境設定	CVE-2010-0558	2012-12-20 19:28	2010-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195121	8.8	HIGH Network	changjia_property_management_system_project	changjia_property_management_system	Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-22858	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

195122	7.5	HIGH Network	changjia_property_management_system_project	changjia_property_management_system	The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.	CWE-22 Path Traversal	CVE-2021-22857	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

195123	7.5	HIGH Network	changjia_property_management_system_project	changjia_property_management_system	The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.	CWE-89 SQL Injection	CVE-2021-22856	2024-11-21 14:50	2021-02-17	Show	GitHub Exploit DB Packet Storm

195124	9.8	CRITICAL Network	microfocus	operations_bridge_manager	Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could…	NVD-CWE-noinfo	CVE-2021-22504	2024-11-21 14:50	2021-02-13	Show	GitHub Exploit DB Packet Storm

195125	9.8	CRITICAL Network	advantech	iview	Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'.	CWE-89 SQL Injection	CVE-2021-22658	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

195126	6.1	MEDIUM Network	rubyonrails fedoraproject	rails fedora	The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" forma…	CWE-601 Open Redirect	CVE-2021-22881	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

195127	7.5	HIGH Network	rubyonrails fedoraproject	rails fedora	The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validat…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-22880	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

195128	7.5	HIGH Network	advantech	iview	Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files.	CWE-22 Path Traversal	CVE-2021-22656	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

195129	7.5	HIGH Network	advantech	iview	Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information.	CWE-89 SQL Injection	CVE-2021-22654	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

195130	9.8	CRITICAL Network	advantech	iview	Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.	-	CVE-2021-22652	2024-11-21 14:50	2021-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed