Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228001	5	警告	General Electric Company	-	GE Intelligent Platforms Proficy Real-Time Information Portal における設定ファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0651	2013-01-29 16:48	2013-01-22	Show	GitHub Exploit DB Packet Storm

228002	6.8	警告	レッドハット	-	FreeIPA のクライアントにおけるドメイン参加の処理を偽装される脆弱性	CWE-310 暗号の問題	CVE-2012-5484	2013-01-29 16:48	2013-01-23	Show	GitHub Exploit DB Packet Storm

228003	5	警告	トリップアドバイザー	-	TripAdvisor for iOS における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-4917	2013-01-29 16:47	2013-01-26	Show	GitHub Exploit DB Packet Storm

228004	9.3	危険	CoolPDF Software	-	CoolPDF の Reader におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4914	2013-01-29 16:47	2013-01-26	Show	GitHub Exploit DB Packet Storm

228005	10	危険	ヒューレット・パッカード	-	HP Diagnostics Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3278	2013-01-29 16:43	2013-01-22	Show	GitHub Exploit DB Packet Storm

228006	5.8	警告	Novell	-	WebYaST にホスト一覧を改ざんされる脆弱性	CWE-noinfo 情報不足	CVE-2012-0435	2013-01-29 14:10	2013-01-28	Show	GitHub Exploit DB Packet Storm

228007	10	危険	IBM	-	IBM WebSphere Application Server における脆弱性	CWE-noinfo 情報不足	CVE-2013-0462	2013-01-29 11:49	2013-01-23	Show	GitHub Exploit DB Packet Storm

228008	4.3	警告	IBM	-	IBM WebSphere Application Server の Virtual Member Manager 管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0461	2013-01-29 11:49	2013-01-23	Show	GitHub Exploit DB Packet Storm

228009	6.8	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0460	2013-01-29 11:48	2013-01-23	Show	GitHub Exploit DB Packet Storm

228010	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0459	2013-01-29 11:47	2013-01-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194461	6.5	MEDIUM Network	1password	scim_bridge	1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.	CWE-287 Improper Authentication	CVE-2021-26905	2024-11-21 14:57	2021-02-9	Show	GitHub Exploit DB Packet Storm

194462	5.5	MEDIUM Local	amd	epyc_7003_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_7373x_firmware epyc_73f3_firmware epyc_7413_firmware epyc_7443_firmware epyc_7443p_firmware	Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.	CWE-20 Improper Input Validation	CVE-2021-26404	2024-11-21 14:56	2023-01-11	Show	GitHub Exploit DB Packet Storm

194463	7.8	HIGH Local	amd	enterprise_driver radeon_pro_software radeon_software radeon_rx_vega_56_firmware radeon_rx_vega_64_firmware ryzen_3_2200ge_firmware ryzen_3_2200g_firmware ryzen_5_2400ge_firmware…	Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading …	CWE-787 Out-of-bounds Write	CVE-2021-26392	2024-11-21 14:56	2022-11-10	Show	GitHub Exploit DB Packet Storm

194464	4.9	MEDIUM Network	amd	epyc_7h12_firmware epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7742_firmware epyc_7702p_firmware epyc_7702_firmware epyc_7662_firmware epyc_7642_firmware …	Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.	CWE-125 Out-of-bounds Read	CVE-2021-26345	2024-11-21 14:56	2023-11-15	Show	GitHub Exploit DB Packet Storm

194465	7.8	HIGH Local	zscaler	client_connector	Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges.	CWE-426 Untrusted Search Path	CVE-2021-26738	2024-11-21 14:56	2023-10-23	Show	GitHub Exploit DB Packet Storm

194466	4.7	MEDIUM Local	zscaler	client_connector	The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting…	CWE-346 Origin Validation Error	CVE-2021-26737	2024-11-21 14:56	2023-10-23	Show	GitHub Exploit DB Packet Storm

194467	7.8	HIGH Local	zscaler	client_connector	Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to …	CWE-22 Path Traversal	CVE-2021-26736	2024-11-21 14:56	2023-10-23	Show	GitHub Exploit DB Packet Storm

194468	7.8	HIGH Local	zscaler	client_connector	The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges.	CWE-428 Unquoted Search Path or Element	CVE-2021-26735	2024-11-21 14:56	2023-10-23	Show	GitHub Exploit DB Packet Storm

194469	5.5	MEDIUM Local	zscaler	client_connector	Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated con…	NVD-CWE-noinfo	CVE-2021-26734	2024-11-21 14:56	2023-10-23	Show	GitHub Exploit DB Packet Storm

194470	9.8	CRITICAL Network	fortra	delivernow	SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sen…	CWE-89 SQL Injection	CVE-2021-26837	2024-11-21 14:56	2023-09-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed