Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228361 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-3679 2013-02-7 16:51 2012-07-25 Show GitHub Exploit DB Packet Storm
228362 4 警告 シスコシステムズ - Cisco Webex Social におけるファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1107 2013-02-7 16:33 2013-01-13 Show GitHub Exploit DB Packet Storm
228363 10 危険 ヒューレット・パッカード - HP LeftHand Virtual SAN Appliance hydra Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3285 2013-02-7 16:31 2013-02-5 Show GitHub Exploit DB Packet Storm
228364 10 危険 ヒューレット・パッカード - HP LeftHand Virtual SAN Appliance hydra Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3284 2013-02-7 16:31 2013-02-5 Show GitHub Exploit DB Packet Storm
228365 10 危険 ヒューレット・パッカード - HP LeftHand Virtual SAN Appliance hydra Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3283 2013-02-7 16:30 2013-02-5 Show GitHub Exploit DB Packet Storm
228366 10 危険 ヒューレット・パッカード - HP LeftHand Virtual SAN Appliance hydra Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3282 2013-02-7 16:30 2013-02-5 Show GitHub Exploit DB Packet Storm
228367 7.8 危険 ヒューレット・パッカード - HP XP P9000 Command View Advanced Edition におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3281 2013-02-7 16:29 2013-01-30 Show GitHub Exploit DB Packet Storm
228368 4.3 警告 ヒューレット・パッカード - HP Network Node Manager i におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3279 2013-02-7 16:28 2013-01-31 Show GitHub Exploit DB Packet Storm
228369 6.8 警告 DELL EMC (旧 EMC Corporation) - RSA Archer SmartSuite Framework および RSA Archer eGRC におけるクリックジャッキング攻撃を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2294 2013-02-7 16:28 2013-02-6 Show GitHub Exploit DB Packet Storm
228370 7.5 危険 DELL EMC (旧 EMC Corporation) - RSA Archer SmartSuite Framework および RSA Archer eGRC におけるディレクトリトラバーサルの脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2293 2013-02-7 16:27 2013-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194971 6.1 MEDIUM
Network 		asus askey_rtf8115vw_firmware Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header. CWE-601
Open Redirect 		CVE-2021-27404 2024-11-21 14:57 2021-02-19 Show GitHub Exploit DB Packet Storm
194972 6.1 MEDIUM
Network 		asus askey_rtf8115vw_firmware Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS. CWE-79
Cross-site Scripting 		CVE-2021-27403 2024-11-21 14:57 2021-02-19 Show GitHub Exploit DB Packet Storm
194973 5.9 MEDIUM
Network 		digium certified_asterisk
asterisk 		An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 1… CWE-404
 Improper Resource Shutdown or Release 		CVE-2021-26906 2024-11-21 14:57 2021-02-19 Show GitHub Exploit DB Packet Storm
194974 9.8 CRITICAL
Network 		kollectapp kollect KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter. CWE-502
 Deserialization of Untrusted Data 		CVE-2021-27335 2024-11-21 14:57 2021-02-19 Show GitHub Exploit DB Packet Storm
194975 10.0 CRITICAL
Network 		frendi frendica Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-27329 2024-11-21 14:57 2021-02-19 Show GitHub Exploit DB Packet Storm
194976 7.8 HIGH
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privil… NVD-CWE-Other
CVE-2021-27379 2024-11-21 14:57 2021-02-19 Show GitHub Exploit DB Packet Storm
194977 9.8 CRITICAL
Network 		rand_core_project rand_core An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too … CWE-131
Incorrect Calculation of Buffer Size 		CVE-2021-27378 2024-11-21 14:57 2021-02-18 Show GitHub Exploit DB Packet Storm
194978 9.8 CRITICAL
Network 		yottadb yottadb An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free. CWE-416
 Use After Free 		CVE-2021-27377 2024-11-21 14:57 2021-02-18 Show GitHub Exploit DB Packet Storm
194979 9.8 CRITICAL
Network 		nb-connect_project nb-connect An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::S… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2021-27376 2024-11-21 14:57 2021-02-18 Show GitHub Exploit DB Packet Storm
194980 6.5 MEDIUM
Network 		doctor_appointment_system_project doctor_appointment_system SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack. CWE-89
SQL Injection 		CVE-2021-27124 2024-11-21 14:57 2021-02-18 Show GitHub Exploit DB Packet Storm