Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228341 5 警告 ViewVC - ViewVC における非公開 root 名を発見される脆弱性 CWE-200
情報漏えい 		CVE-2010-0004 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
228342 4.3 警告 Urs Wolfer - kwebkitpart の webkitpart.cpp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4976 2012-12-20 19:28 2009-12-5 Show GitHub Exploit DB Packet Storm
228343 3.5 注意 TYPO3 Association - TYPO3 用の Commerce エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4963 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228344 7.5 危険 stefan koch - TYPO3 用の t3m エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4959 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228345 4.3 警告 wapplersystems - TYPO3 用の Visitor Tracking エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4956 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
228346 7.5 危険 thomas hempel - TYPO3 用の ultraCards エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4955 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
228347 7.5 危険 websedit - TYPO3 用の sk_calendar エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4954 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
228348 4.3 警告 stefan geith - TYPO3 用の sg_userdata エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4953 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
228349 10 危険 serge gebhardt - TYPO3 用の Directory Listing エクステンションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4952 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
228350 7.5 危険 tim lochmueller & thomas buss - TYPO3 用の A21glossary Advanced Output エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4950 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194641 7.8 HIGH
Local 		hpe cloudline_cl5800_gen10_server_firmware
cloudline_cl3100_gen10_server_firmware
cloudline_cl4100_gen10_server_firmware
cloudline_cl5200_gen9_server_firmware
cloudline_cl5800_gen9_server_fir… 		The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5… CWE-120
Classic Buffer Overflow 		CVE-2021-25123 2024-11-21 14:54 2021-01-29 Show GitHub Exploit DB Packet Storm
194642 7.8 HIGH
Local 		trendmicro housecall_for_home_networks A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execu… CWE-427
 Uncontrolled Search Path Element 		CVE-2021-25247 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
194643 5.5 MEDIUM
Local 		trendmicro serverprotect A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25226 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
194644 5.5 MEDIUM
Local 		trendmicro serverprotect A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25225 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
194645 5.5 MEDIUM
Local 		trendmicro serverprotect A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The speci… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-25224 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
194646 8.8 HIGH
Network 		wisc htcondor HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method. CWE-306
Missing Authentication for Critical Function 		CVE-2021-25312 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
194647 9.9 CRITICAL
Network 		wisc htcondor condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by ro… CWE-22
Path Traversal 		CVE-2021-25311 2024-11-21 14:54 2021-01-28 Show GitHub Exploit DB Packet Storm
194648 6.1 MEDIUM
Network 		misp misp MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs. CWE-79
Cross-site Scripting 		CVE-2021-25325 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
194649 6.1 MEDIUM
Network 		misp misp MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp. CWE-79
Cross-site Scripting 		CVE-2021-25324 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm
194650 9.1 CRITICAL
Network 		misp misp The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a password. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2021-25323 2024-11-21 14:54 2021-01-20 Show GitHub Exploit DB Packet Storm