Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228391 4.3 警告 シーメンス - Siemens WinCC の HMI Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0668 2013-03-25 18:49 2013-03-15 Show GitHub Exploit DB Packet Storm
228392 5 警告 MailUp - WordPress 用 MailUp プラグインにおけるプラグインの設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2640 2013-03-25 16:43 2013-03-15 Show GitHub Exploit DB Packet Storm
228393 5 警告 MailUp - WordPress 用 MailUp プラグインにおけるプラグインの設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0731 2013-03-25 16:41 2013-03-15 Show GitHub Exploit DB Packet Storm
228394 5 警告 Piwik - Piwik における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2633 2013-03-25 16:35 2013-03-8 Show GitHub Exploit DB Packet Storm
228395 4.3 警告 Piwik - Piwik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1844 2013-03-25 16:34 2013-03-8 Show GitHub Exploit DB Packet Storm
228396 7.2 危険 Canonical - Ubuntu で使用される pam-xdg-support における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1052 2013-03-25 16:21 2013-03-18 Show GitHub Exploit DB Packet Storm
228397 4.3 警告 Debian
Canonical		 - apt におけるパッケージを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1051 2013-03-25 16:20 2013-03-14 Show GitHub Exploit DB Packet Storm
228398 6.8 警告 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2013-2632 2013-03-25 16:04 2013-03-18 Show GitHub Exploit DB Packet Storm
228399 6.9 警告 XFree86 Project - XFree86 x11perf の x11perfcomp における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-2504 2013-03-25 16:02 2011-07-27 Show GitHub Exploit DB Packet Storm
228400 5.8 警告 Apache Software Foundation - Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 - CVE-2012-5633 2013-03-25 16:00 2012-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194171 7.8 HIGH
Local 		linux
netapp 		linux_kernel
cloud_backup
h410c_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h500e_firmware
h700e_firmware
h410s_firmware 		Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with q… CWE-416
 Use After Free 		CVE-2021-28691 2024-11-21 15:00 2021-06-29 Show GitHub Exploit DB Packet Storm
194172 5.5 MEDIUM
Local 		dovecot
fedoraproject 		dovecot
fedora 		Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled locatio… CWE-22
Path Traversal 		CVE-2021-29157 2024-11-21 15:00 2021-06-28 Show GitHub Exploit DB Packet Storm
194173 9.8 CRITICAL
Network 		zohocorp manageengine_adselfservice_plus Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password. CWE-78
OS Command  		CVE-2021-28958 2024-11-21 15:00 2021-06-25 Show GitHub Exploit DB Packet Storm
194174 9.8 CRITICAL
Network 		qnap qts A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised… - CVE-2021-28800 2024-11-21 15:00 2021-06-24 Show GitHub Exploit DB Packet Storm
194175 4.8 MEDIUM
Network 		get-simple getsimplecms Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files, CWE-79
Cross-site Scripting 		CVE-2021-28977 2024-11-21 15:00 2021-06-23 Show GitHub Exploit DB Packet Storm
194176 7.2 HIGH
Network 		get-simple getsimplecms Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-28976 2024-11-21 15:00 2021-06-23 Show GitHub Exploit DB Packet Storm
194177 7.5 HIGH
Network 		synology diskstation_manager
diskstation_manager_unified_controller 		Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to … - CVE-2021-29087 2024-11-21 15:00 2021-06-23 Show GitHub Exploit DB Packet Storm
194178 7.5 HIGH
Network 		synology diskstation_manager
diskstation_manager_unified_controller 		Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to obtain sensitive inf… CWE-200
Information Exposure 		CVE-2021-29086 2024-11-21 15:00 2021-06-23 Show GitHub Exploit DB Packet Storm
194179 7.5 HIGH
Network 		synology diskstation_manager
diskstation_manager_unified_controller 		Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.… - CVE-2021-29085 2024-11-21 15:00 2021-06-23 Show GitHub Exploit DB Packet Storm
194180 7.5 HIGH
Network 		synology diskstation_manager
diskstation_manager_unified_controller 		Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) … - CVE-2021-29084 2024-11-21 15:00 2021-06-23 Show GitHub Exploit DB Packet Storm