Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228281 2.6 注意 LimeSurvey - LimeSurvey におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5256 2013-02-15 18:56 2012-02-9 Show GitHub Exploit DB Packet Storm
228282 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-1455 2013-02-15 16:51 2013-02-4 Show GitHub Exploit DB Packet Storm
228283 2.1 注意 Bitbucket - xNBD の xnbd-server および xndb-wrapperr における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0265 2013-02-15 16:48 2013-02-13 Show GitHub Exploit DB Packet Storm
228284 5 警告 LSIロジック株式会社 - 3DM (3ware Disk Manager) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-0705 2013-02-15 12:00 2013-02-15 Show GitHub Exploit DB Packet Storm
228285 9.3 危険 Fabrice Bellard - Qemu の e1000 デバイスドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-6075 2013-02-15 11:56 2013-02-13 Show GitHub Exploit DB Packet Storm
228286 10 危険 アドビシステムズ - Adobe Shockwave Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0636 2013-02-15 11:09 2013-02-12 Show GitHub Exploit DB Packet Storm
228287 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0635 2013-02-15 11:08 2013-02-12 Show GitHub Exploit DB Packet Storm
228288 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1277 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228289 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1276 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228290 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1275 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194231 5.9 MEDIUM
Network 		cohesity cohesity_dataplatform A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions c… CWE-306
Missing Authentication for Critical Function 		CVE-2021-28124 2024-11-21 14:59 2021-04-3 Show GitHub Exploit DB Packet Storm
194232 9.8 CRITICAL
Network 		cohesity cohesity_dataplatform Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the li… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2021-28123 2024-11-21 14:59 2021-04-3 Show GitHub Exploit DB Packet Storm
194233 6.7 MEDIUM
Network 		okta access_gateway A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute O… CWE-78
OS Command  		CVE-2021-28113 2024-11-21 14:59 2021-04-3 Show GitHub Exploit DB Packet Storm
194234 5.4 MEDIUM
Network 		devolutions remote_desktop_manager Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fi… CWE-79
Cross-site Scripting 		CVE-2021-28047 2024-11-21 14:59 2021-04-2 Show GitHub Exploit DB Packet Storm
194235 7.5 HIGH
Network 		eclipse
oracle
jenkins
netapp 		jetty
communications_services_gatekeeper
autovue_for_agile_product_lifecycle_management
siebel_core_-_automation
communications_element_manager
communications_cloud_native_core_policy<… 		In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-28165 2024-11-21 14:59 2021-04-2 Show GitHub Exploit DB Packet Storm
194236 5.3 MEDIUM
Network 		eclipse
netapp
oracle 		jetty
santricity_cloud_connector
snapcenter
e-series_performance_analyzer
e-series_santricity_web_services
virtual_storage_console
storage_replication_adapter_for_clustered_data_ont… 		In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF direc… NVD-CWE-Other
CVE-2021-28164 2024-11-21 14:59 2021-04-2 Show GitHub Exploit DB Packet Storm
194237 6.5 MEDIUM
Network 		adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker… - CVE-2021-28546 2024-11-21 14:59 2021-04-1 Show GitHub Exploit DB Packet Storm
194238 8.1 HIGH
Network 		adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker… - CVE-2021-28545 2024-11-21 14:59 2021-04-1 Show GitHub Exploit DB Packet Storm
194239 2.7 LOW
Network 		eclipse
fedoraproject
apache
netapp
oracle 		jetty
fedora
solr
ignite
santricity_cloud_connector
snapcenter
e-series_performance_analyzer
e-series_santricity_web_services
virtual_storage_console
storage_replication_ad… 		In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a sta… CWE-59
Link Following 		CVE-2021-28163 2024-11-21 14:59 2021-04-2 Show GitHub Exploit DB Packet Storm
194240 7.5 HIGH
Network 		pbootcms pbootcms PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account. CWE-89
SQL Injection 		CVE-2021-28245 2024-11-21 14:59 2021-03-31 Show GitHub Exploit DB Packet Storm