Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228341 7.5 危険 sweetphp - TotalCalendar の rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4973 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228342 7.5 危険 vincent tietz - TYPO3 用の AJAX Chat エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4971 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228343 7.5 危険 typo3-macher - TYPO3 用の t3m_affiliate エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4970 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228344 7.5 危険 TYPO3 Association - TYPO3 用の SBbanner エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4969 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228345 7.5 危険 thomas waggershauser - TYPO3 用の AIRware Lexicon エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4965 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228346 5 警告 ViewVC - ViewVC における非公開 root 名を発見される脆弱性 CWE-200
情報漏えい 		CVE-2010-0004 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
228347 4.3 警告 Urs Wolfer - kwebkitpart の webkitpart.cpp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4976 2012-12-20 19:28 2009-12-5 Show GitHub Exploit DB Packet Storm
228348 3.5 注意 TYPO3 Association - TYPO3 用の Commerce エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4963 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228349 7.5 危険 stefan koch - TYPO3 用の t3m エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4959 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
228350 4.3 警告 wapplersystems - TYPO3 用の Visitor Tracking エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4956 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194661 9.1 CRITICAL
Network 		python
fedoraproject 		pillow
fedora 		An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la. CWE-125
Out-of-bounds Read 		CVE-2021-25287 2024-11-21 14:54 2021-06-3 Show GitHub Exploit DB Packet Storm
194662 7.4 HIGH
Adjacent 		isc
fedoraproject
debian
siemens
netapp 		dhcp
fedora
debian_linux
ruggedcom_rox_rx1400_firmware
ruggedcom_rox_rx1500_firmware
ruggedcom_rox_rx1501_firmware
ruggedcom_rox_rx1510_firmware
ruggedcom_rox_rx1511_firmware
… 		In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2021-25217 2024-11-21 14:54 2021-05-27 Show GitHub Exploit DB Packet Storm
194663 6.7 MEDIUM
Local 		sophos home
intercept_x 		In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges. NVD-CWE-noinfo
CVE-2021-25264 2024-11-21 14:54 2021-05-18 Show GitHub Exploit DB Packet Storm
194664 7.8 HIGH
Local 		opensuse factory A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Facto… - CVE-2021-25319 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194665 3.3 LOW
Local 		suse
fedoraproject 		cups
fedora 		A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factor… - CVE-2021-25317 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194666 6.1 MEDIUM
Network 		solarwinds serv-u_file_server SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header. CWE-79
Cross-site Scripting 		CVE-2021-25179 2024-11-21 14:54 2021-05-5 Show GitHub Exploit DB Packet Storm
194667 8.8 HIGH
Network 		arubanetworks airwave A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-78
OS Command  		CVE-2021-25167 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194668 8.8 HIGH
Network 		arubanetworks airwave A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-78
OS Command  		CVE-2021-25166 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194669 8.1 HIGH
Network 		arubanetworks airwave A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address th… CWE-611
XXE 		CVE-2021-25163 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm
194670 9.8 CRITICAL
Network 		debian
isc
siemens
netapp 		debian_linux
bind
sinec_infrastructure_network_services
cloud_backup
active_iq_unified_manager
aff_a250_firmware
aff_500f_firmware
h300s_firmware
h500s_firmware
h700s_firmw… 		In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of t… CWE-125
Out-of-bounds Read 		CVE-2021-25216 2024-11-21 14:54 2021-04-29 Show GitHub Exploit DB Packet Storm