Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228421	2.1	注意	レッドハット VMware Samba Project	-	Samba の client/mount.cifs.c におけるサービス運用妨害 (mtab 破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0547	2012-12-21 16:48	2010-02-4	Show	GitHub Exploit DB Packet Storm

228422	9.3	危険	VMware RPM レッドハット	-	RPM におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3378	2012-12-21 16:47	2011-12-24	Show	GitHub Exploit DB Packet Storm

228423	7.2	危険	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Package Manager の lib/fsm.c における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2059	2012-12-21 16:46	2010-06-8	Show	GitHub Exploit DB Packet Storm

228424	7.2	危険	VMware Linux	-	Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2517	2012-12-21 16:44	2012-05-24	Show	GitHub Exploit DB Packet Storm

228425	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

228426	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

228427	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

228428	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4422	2012-12-21 16:38	2011-02-15	Show	GitHub Exploit DB Packet Storm

228429	5.1	警告	サン・マイクロシステムズヒューレット・パッカードオラクル VMware 日立レッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3574	2012-12-21 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

228430	5.1	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3573	2012-12-21 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
216521	8.8	HIGH Network	atlassian	alfresco_enterprise_content_management	An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript) may execute arbitrary Java code or run a…	CWE-74 Injection	CVE-2020-12873	2024-11-21 14:00	2021-02-20	Show	GitHub Exploit DB Packet Storm

216522	6.5	MEDIUM Network	hubspot	jinjava	Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrar…	CWE-863 Incorrect Authorization	CVE-2020-12668	2024-11-21 14:00	2021-02-20	Show	GitHub Exploit DB Packet Storm

216523	7.8	HIGH Local	digi	connectport_x2e_firmware	Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/py…	CWE-59 Link Following	CVE-2020-12878	2024-11-21 14:00	2021-02-18	Show	GitHub Exploit DB Packet Storm

216524	6.5	MEDIUM Network	teradici	cloud_access_connector	An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID…	CWE-352 Origin Validation Error	CVE-2020-13186	2024-11-21 14:00	2021-02-12	Show	GitHub Exploit DB Packet Storm

216525	6.5	MEDIUM Network	teradici	cloud_access_connector	Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an atta…	CWE-287 Improper Authentication	CVE-2020-13185	2024-11-21 14:00	2021-02-12	Show	GitHub Exploit DB Packet Storm

216526	9.8	CRITICAL Network	wavlink	wn575a4_firmware wn579x3_firmware	Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.	CWE-77 Command Injection	CVE-2020-13117	2024-11-21 14:00	2021-02-10	Show	GitHub Exploit DB Packet Storm

216527	4.8	MEDIUM Network	tufin	securechange	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg…	CWE-79 Cross-site Scripting	CVE-2020-13134	2024-11-21 14:00	2021-01-20	Show	GitHub Exploit DB Packet Storm

216528	6.1	MEDIUM Network	tufin	securechange	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg…	CWE-79 Cross-site Scripting	CVE-2020-13133	2024-11-21 14:00	2021-01-20	Show	GitHub Exploit DB Packet Storm

216529	5.4	MEDIUM Network	carbonite	server_backup_portal	OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation.	CWE-79 Cross-site Scripting	CVE-2020-13116	2024-11-21 14:00	2021-01-13	Show	GitHub Exploit DB Packet Storm

216530	9.8	CRITICAL Network	gssproxy_project debian	gssproxy debian_linux	gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when runn…	CWE-667 Improper Locking	CVE-2020-12658	2024-11-21 14:00	2020-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed