Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228391	5.5	警告	サイバートラスト株式会社 VMware シトリックス・システムズレッドハット	-	Xen の vbd_create 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4238	2012-12-25 18:00	2011-01-13	Show	GitHub Exploit DB Packet Storm

228392	4.9	警告	サイバートラスト株式会社 VMware レッドハット	-	Linux kernel の udp_queue_rcv_skb 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4161	2012-12-25 17:58	2010-12-30	Show	GitHub Exploit DB Packet Storm

228393	2.1	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の sk_run_filter 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4158	2012-12-25 17:56	2010-12-30	Show	GitHub Exploit DB Packet Storm

228394	9.3	危険	サムスン Meizu	-	Samsung GALAXY および Meizu MX など Android デバイスにおける任意の物理メモリを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6422	2012-12-25 17:53	2012-12-18	Show	GitHub Exploit DB Packet Storm

228395	7.2	危険	シマンテック	-	Symantec Endpoint Protection の管理コンソールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4348	2012-12-25 17:50	2012-12-10	Show	GitHub Exploit DB Packet Storm

228396	1.2	注意	Linux	-	Linux Kernel の rio_ioctl 関数における Ethernet アダプタへデータを書き込まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2313	2012-12-25 17:46	2012-06-13	Show	GitHub Exploit DB Packet Storm

228397	7.1	危険	Linux	-	Linux Kernel の fs/ext4/super.c におけるファイルシステムグループデータの不整合を誘発される脆弱性	CWE-189 数値処理の問題	CVE-2012-2100	2012-12-25 17:44	2012-07-3	Show	GitHub Exploit DB Packet Storm

228398	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2012-4782	2012-12-25 17:11	2012-12-11	Show	GitHub Exploit DB Packet Storm

228399	9.3	危険	マイクロソフト	-	Microsoft Windows における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4774	2012-12-25 17:08	2012-12-11	Show	GitHub Exploit DB Packet Storm

228400	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-2556	2012-12-25 17:05	2012-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194341	7.8	HIGH Local	amd	epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware	A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.	NVD-CWE-noinfo	CVE-2021-26324	2024-11-21 14:56	2022-05-11	Show	GitHub Exploit DB Packet Storm

194342	8.8	HIGH Network	tobesoft	xplatform	A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent pat…	CWE-22 Path Traversal	CVE-2021-26629	2024-11-21 14:56	2022-04-27	Show	GitHub Exploit DB Packet Storm

194343	6.1	MEDIUM Network	maxb	maxboard	Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insuf…	CWE-79 Cross-site Scripting	CVE-2021-26628	2024-11-21 14:56	2022-04-27	Show	GitHub Exploit DB Packet Storm

194344	7.5	HIGH Network	qcp	qcp200w_firmware	Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay comman…	CWE-287 Improper Authentication	CVE-2021-26627	2024-11-21 14:56	2022-04-20	Show	GitHub Exploit DB Packet Storm

194345	8.8	HIGH Network	tobesoft	xplatform	Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first param…	CWE-20 Improper Input Validation	CVE-2021-26626	2024-11-21 14:56	2022-04-20	Show	GitHub Exploit DB Packet Storm

194346	8.8	HIGH Network	tobesoft	nexacro	Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an automatic update function that does not v…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2021-26625	2024-11-21 14:56	2022-04-20	Show	GitHub Exploit DB Packet Storm

194347	8.8	HIGH Network	escanav	escan_anti-virus	An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroo…	CWE-20 Improper Input Validation	CVE-2021-26624	2024-11-21 14:56	2022-04-2	Show	GitHub Exploit DB Packet Storm

194348	9.8	CRITICAL Network	bandisoft	bandizip	A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2021-26623	2024-11-21 14:56	2022-04-2	Show	GitHub Exploit DB Packet Storm

194349	8.1	HIGH Network	impresscms	impresscms	ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.	CWE-22 Path Traversal	CVE-2021-26601	2024-11-21 14:56	2022-03-28	Show	GitHub Exploit DB Packet Storm

194350	9.8	CRITICAL Network	impresscms	impresscms	ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).	CWE-843 Type Confusion	CVE-2021-26600	2024-11-21 14:56	2022-03-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed