Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228191 6.8 警告 rockettheme - Joomla! 用の Rokdownloads コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1056 2012-12-20 19:29 2010-03-16 Show GitHub Exploit DB Packet Storm
228192 5.1 警告 tufat - osDate における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1055 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
228193 6.8 警告 zentracking - Zen Time Tracking における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1053 2012-12-20 19:29 2010-03-22 Show GitHub Exploit DB Packet Storm
228194 7.5 危険 Uiga - Uiga Business Portal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1049 2012-12-20 19:29 2010-03-22 Show GitHub Exploit DB Packet Storm
228195 4.3 警告 Uiga - Uiga Business Portal の blog/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1048 2012-12-20 19:29 2010-03-22 Show GitHub Exploit DB Packet Storm
228196 7.5 危険 ryan marshall - Rostermain の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1046 2012-12-20 19:29 2010-03-22 Show GitHub Exploit DB Packet Storm
228197 4.3 警告 sk-typo3 - TYPO3 用の Simple Gallery エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1020 2012-12-20 19:28 2010-03-19 Show GitHub Exploit DB Packet Storm
228198 7.5 危険 sk-typo3 - TYPO3 用の Simple Gallery エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1019 2012-12-20 19:28 2010-03-19 Show GitHub Exploit DB Packet Storm
228199 4.3 警告 steffen kamper - TYPO3 用の reports_logview エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1014 2012-12-20 19:28 2010-03-19 Show GitHub Exploit DB Packet Storm
228200 4.3 警告 tim lochmueller - TYPO3 用の myDashboard エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1011 2012-12-20 19:28 2010-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194661 9.1 CRITICAL
Network 		python
fedoraproject 		pillow
fedora 		An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la. CWE-125
Out-of-bounds Read 		CVE-2021-25287 2024-11-21 14:54 2021-06-3 Show GitHub Exploit DB Packet Storm
194662 7.4 HIGH
Adjacent 		isc
fedoraproject
debian
siemens
netapp 		dhcp
fedora
debian_linux
ruggedcom_rox_rx1400_firmware
ruggedcom_rox_rx1500_firmware
ruggedcom_rox_rx1501_firmware
ruggedcom_rox_rx1510_firmware
ruggedcom_rox_rx1511_firmware
… 		In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2021-25217 2024-11-21 14:54 2021-05-27 Show GitHub Exploit DB Packet Storm
194663 6.7 MEDIUM
Local 		sophos home
intercept_x 		In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges. NVD-CWE-noinfo
CVE-2021-25264 2024-11-21 14:54 2021-05-18 Show GitHub Exploit DB Packet Storm
194664 7.8 HIGH
Local 		opensuse factory A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Facto… - CVE-2021-25319 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194665 3.3 LOW
Local 		suse
fedoraproject 		cups
fedora 		A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factor… - CVE-2021-25317 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194666 6.1 MEDIUM
Network 		solarwinds serv-u_file_server SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header. CWE-79
Cross-site Scripting 		CVE-2021-25179 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194667 8.8 HIGH
Network 		arubanetworks airwave A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-78
OS Command  		CVE-2021-25167 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194668 8.8 HIGH
Network 		arubanetworks airwave A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-78
OS Command  		CVE-2021-25166 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194669 8.1 HIGH
Network 		arubanetworks airwave A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-611
XXE 		CVE-2021-25163 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194670 9.8 CRITICAL
Network 		debian
isc
siemens
netapp 		debian_linux
bind
sinec_infrastructure_network_services
cloud_backup
active_iq_unified_manager
aff_a250_firmware
aff_500f_firmware
h300s_firmware
h500s_firmware
h700s_firmw… 		In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of t… CWE-125
Out-of-bounds Read 		CVE-2021-25216 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm