Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228091 7.8 危険 シスコシステムズ - Cisco ASA および FWSM のソフトウェアにおけるサービス運用妨害 (DOS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-1149 2013-04-15 09:49 2013-04-10 Show GitHub Exploit DB Packet Storm
228092 7.5 危険 Google - Google Chrome OS におけるアクセス制限を回避される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-0927 2013-04-12 16:22 2013-04-8 Show GitHub Exploit DB Packet Storm
228093 4.4 警告 レッドハット - Red Hat OpenStack Essex および Folsom の PackStack におけるデプロイされたシステムを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-1815 2013-04-12 15:56 2013-03-21 Show GitHub Exploit DB Packet Storm
228094 2.1 注意 レッドハット - Red Hat OpenStack Essex および Folsom における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6120 2013-04-12 15:51 2013-04-4 Show GitHub Exploit DB Packet Storm
228095 4 警告 フェンリル株式会社 - Sleipnir Mobile for Android において任意のエクステンション API が呼び出される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2304 2013-04-12 12:01 2013-04-12 Show GitHub Exploit DB Packet Storm
228096 4.3 警告 Splunk - Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2766 2013-04-12 11:04 2013-03-25 Show GitHub Exploit DB Packet Storm
228097 5 警告 Puppet - Puppet Labs の Puppet Enterprise におけるコンソールアクセスを取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-2716 2013-04-12 11:03 2013-03-28 Show GitHub Exploit DB Packet Storm
228098 7.5 危険 Digineo - Ruby 用 Thumbshooter gem の lib/thumbshooter.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1898 2013-04-11 19:42 2013-03-25 Show GitHub Exploit DB Packet Storm
228099 7.5 危険 Dan Kubb - Ruby 用 extlib gem におけるオブジェクトインジェクション攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1802 2013-04-11 19:41 2013-01-14 Show GitHub Exploit DB Packet Storm
228100 7.5 危険 John Nunemaker - Ruby 用 httparty gem におけるオブジェクトインジェクション攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1801 2013-04-11 19:41 2013-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194381 2.5 LOW
Local 		exiv2
fedoraproject
debian 		exiv2
fedora
debian_linux 		Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv… - CVE-2021-29473 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194382 6.5 MEDIUM
Network 		exiv2
fedoraproject 		exiv2
fedora 		Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The o… - CVE-2021-29470 2024-11-21 15:01 2021-04-24 Show GitHub Exploit DB Packet Storm
194383 7.5 HIGH
Network 		redis.js redis Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings… NVD-CWE-Other
CVE-2021-29469 2024-11-21 15:01 2021-04-24 Show GitHub Exploit DB Packet Storm
194384 7.5 HIGH
Network 		hashicorp vault HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed in 1.5.8, 1.6.4, and 1.7.1. CWE-295
Improper Certificate Validation  		CVE-2021-29653 2024-11-21 15:01 2021-04-23 Show GitHub Exploit DB Packet Storm
194385 7.5 HIGH
Network 		discord discord-recon Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important informatio… CWE-22
Path Traversal 		CVE-2021-29466 2024-11-21 15:01 2021-04-22 Show GitHub Exploit DB Packet Storm
194386 6.1 MEDIUM
Network 		wrongthink_project wrongthink Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a pat… CWE-79
Cross-site Scripting 		CVE-2021-29467 2024-11-21 15:01 2021-04-22 Show GitHub Exploit DB Packet Storm
194387 9.8 CRITICAL
Network 		pupnp_project pupnp The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2021-29462 2024-11-21 15:01 2021-04-21 Show GitHub Exploit DB Packet Storm
194388 6.1 MEDIUM
Network 		xmbforum2 xmb XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.1… CWE-79
Cross-site Scripting 		CVE-2021-29399 2024-11-21 15:01 2021-04-19 Show GitHub Exploit DB Packet Storm
194389 6.5 MEDIUM
Network 		curveballjs a12n-server a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to… CWE-863
 Incorrect Authorization 		CVE-2021-29452 2024-11-21 15:01 2021-04-17 Show GitHub Exploit DB Packet Storm
194390 9.1 CRITICAL
Network 		manydesigns portofino Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patc… - CVE-2021-29451 2024-11-21 15:01 2021-04-17 Show GitHub Exploit DB Packet Storm