Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228101 7.5 危険 John Nunemaker - Ruby 用 crack gem におけるオブジェクトインジェクション攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1800 2013-04-11 19:40 2013-01-14 Show GitHub Exploit DB Packet Storm
228102 7.5 危険 Daniel Harrington - Ruby 用 nori gem におけるオブジェクトインジェクション攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0285 2013-04-11 19:39 2013-01-14 Show GitHub Exploit DB Packet Storm
228103 5 警告 New Relic - Ruby Agent における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-0284 2013-04-11 19:38 2013-02-13 Show GitHub Exploit DB Packet Storm
228104 6.8 警告 Michael Bleigh and Intridea, Inc. - Ruby 用 omniauth-oauth2 gem におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6134 2013-04-11 19:37 2013-02-25 Show GitHub Exploit DB Packet Storm
228105 5.8 警告 Apache Software Foundation - Apache Maven のデフォルト設定におけるサーバになりすまされる脆弱性 CWE-16
環境設定 		CVE-2013-0253 2013-04-11 17:36 2013-04-2 Show GitHub Exploit DB Packet Storm
228106 4.3 警告 fedorahosted.org - cronie におけるファイル記述子が漏えいする脆弱性 CWE-200
情報漏えい 		CVE-2012-6097 2013-04-11 17:35 2013-01-9 Show GitHub Exploit DB Packet Storm
228107 2.1 注意 Gluster, Inc.
レッドハット		 - Red Hat Storage の GlusterFS 機能における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5635 2013-04-11 17:35 2013-03-28 Show GitHub Exploit DB Packet Storm
228108 4 警告 OpenStack
Canonical		 - 複数の OpenStack 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1838 2013-04-11 14:57 2013-03-15 Show GitHub Exploit DB Packet Storm
228109 4.3 警告 フェンリル株式会社 - Sleipnir for Windows におけるアドレスバー偽装の脆弱性 CWE-noinfo
情報不足 		CVE-2013-2303 2013-04-11 12:01 2013-04-11 Show GitHub Exploit DB Packet Storm
228110 7.5 危険 アドビシステムズ - Adobe ColdFusion におけるユーザになりすまされる脆弱性 CWE-noinfo
情報不足 		CVE-2013-1387 2013-04-11 11:57 2013-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194331 8.1 HIGH
Network 		devise_masquerade_project devise_masquerade The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of … NVD-CWE-noinfo
CVE-2021-28680 2024-11-21 15:00 2021-12-8 Show GitHub Exploit DB Packet Storm
194332 7.0 HIGH
Local 		xen xen grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associa… NVD-CWE-Other
CVE-2021-28703 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194333 6.1 MEDIUM
Network 		esri arcgis_server A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and stor… CWE-79
Cross-site Scripting 		CVE-2021-29116 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194334 5.3 MEDIUM
Network 		esri arcgis_enterprise An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-29115 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194335 9.8 CRITICAL
Network 		esri arcgis_server A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of … CWE-89
SQL Injection 		CVE-2021-29114 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194336 4.7 MEDIUM
Network 		esri arcgis_server A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page. CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2021-29113 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194337 7.8 HIGH
Local 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH gu… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-28709 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm
194338 7.8 HIGH
Local 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH gu… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-28705 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm
194339 8.6 HIGH
Network 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrat… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-28706 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm
194340 8.8 HIGH
Local 		xen
debian
fedoraproject 		xen
debian_linux
fedora 		PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be starte… NVD-CWE-noinfo
CVE-2021-28708 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm