Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228121 7.5 危険 chatelao - PHP Address Book におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2778 2013-04-10 14:20 2013-04-5 Show GitHub Exploit DB Packet Storm
228122 7.5 危険 chatelao - PHP Address Book に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-0135 2013-04-10 12:40 2013-04-8 Show GitHub Exploit DB Packet Storm
228123 7.1 危険 NVIDIA - NVIDIA 製ビデオカードのディスプレイドライバにバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0131 2013-04-10 12:23 2013-04-8 Show GitHub Exploit DB Packet Storm
228124 4.3 警告 ARM Ltd. (旧 Offspark) - PolarSSL の SSL モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1621 2013-04-9 17:08 2013-02-2 Show GitHub Exploit DB Packet Storm
228125 2.9 注意 Wireshark - Wireshark の DCP-ETSI 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1581 2013-04-9 17:02 2013-01-29 Show GitHub Exploit DB Packet Storm
228126 2.9 注意 Wireshark - Wireshark の DOCSIS CM-STATUS 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1580 2013-04-9 16:57 2013-01-29 Show GitHub Exploit DB Packet Storm
228127 2.9 注意 Wireshark - Wireshark の CLNP 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2013-1582 2013-04-9 16:55 2013-01-29 Show GitHub Exploit DB Packet Storm
228128 2.9 注意 Wireshark - Wireshark の DTN 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1583 2013-04-9 16:53 2013-01-29 Show GitHub Exploit DB Packet Storm
228129 2.9 注意 Wireshark - Wireshark の RTPS 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1579 2013-04-9 16:53 2013-01-29 Show GitHub Exploit DB Packet Storm
228130 2.9 注意 Wireshark - Wireshark の DTN 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1584 2013-04-9 16:51 2013-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194331 8.1 HIGH
Network 		devise_masquerade_project devise_masquerade The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of … NVD-CWE-noinfo
CVE-2021-28680 2024-11-21 15:00 2021-12-8 Show GitHub Exploit DB Packet Storm
194332 7.0 HIGH
Local 		xen xen grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associa… NVD-CWE-Other
CVE-2021-28703 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194333 6.1 MEDIUM
Network 		esri arcgis_server A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and stor… CWE-79
Cross-site Scripting 		CVE-2021-29116 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194334 5.3 MEDIUM
Network 		esri arcgis_enterprise An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-29115 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194335 9.8 CRITICAL
Network 		esri arcgis_server A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of … CWE-89
SQL Injection 		CVE-2021-29114 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194336 4.7 MEDIUM
Network 		esri arcgis_server A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page. CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2021-29113 2024-11-21 15:00 2021-12-7 Show GitHub Exploit DB Packet Storm
194337 7.8 HIGH
Local 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH gu… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-28709 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm
194338 7.8 HIGH
Local 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH gu… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-28705 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm
194339 8.6 HIGH
Network 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrat… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-28706 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm
194340 8.8 HIGH
Local 		xen
debian
fedoraproject 		xen
debian_linux
fedora 		PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be starte… NVD-CWE-noinfo
CVE-2021-28708 2024-11-21 15:00 2021-11-24 Show GitHub Exploit DB Packet Storm