Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 4.3 警告 TYPO3 Association - TYPO3 用の VD / Geomap エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0347 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228452 4.3 警告 TYPO3 Association - TYPO3 用の Tip many friends エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0346 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228453 4.3 警告 TYPO3 Association - TYPO3 用の Majordomo エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0345 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228454 7.5 危険 TYPO3 Association - TYPO3 用の zak_store_management エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0344 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228455 5 警告 トレンドマイクロ - OfficeScan および tmufeng.dll の TMUFE におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0564 2012-12-20 19:28 2009-10-9 Show GitHub Exploit DB Packet Storm
228456 4.3 警告 サン・マイクロシステムズ - Sun Java System Application Server のデフォルト設定における認証の資格情報などを盗まれる脆弱性 CWE-16
環境設定 		CVE-2010-0386 2012-12-20 19:28 2004-11-3 Show GitHub Exploit DB Packet Storm
228457 7.5 危険 TYPO3 Association - TYPO3 用の Clan Users List エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0343 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228458 7.5 危険 TYPO3 Association - TYPO3 用の job_reports エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0342 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228459 7.5 危険 TYPO3 Association - TYPO3 用の BB Simple Jobs エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0341 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
228460 7.5 危険 TYPO3 Association - TYPO3 用の MJS Event Pro エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0340 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194471 9.8 CRITICAL
Network 		netis-systems wf2780_firmware
wf2411_firmware 		Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution. CWE-78
OS Command  		CVE-2021-26747 2024-11-21 14:56 2021-02-19 Show GitHub Exploit DB Packet Storm
194472 7.5 HIGH
Network 		digium certified_asterisk
asterisk 		Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate sec… NVD-CWE-Other
CVE-2021-26712 2024-11-21 14:56 2021-02-19 Show GitHub Exploit DB Packet Storm
194473 7.5 HIGH
Network 		digium certified_asterisk
asterisk 		An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6. When re-negotiating for T.38, if the initial remo… NVD-CWE-noinfo
CVE-2021-26717 2024-11-21 14:56 2021-02-19 Show GitHub Exploit DB Packet Storm
194474 7.8 HIGH
Local 		avahi
debian 		avahi
debian_linux 		avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbit… CWE-59
Link Following 		CVE-2021-26720 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194475 9.8 CRITICAL
Network 		phpgurukul car_rental_portal PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-26809 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194476 5.3 MEDIUM
Network 		apache airflow The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as th… CWE-306
Missing Authentication for Critical Function 		CVE-2021-26697 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194477 6.5 MEDIUM
Network 		apache airflow Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `… NVD-CWE-Other
CVE-2021-26559 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194478 9.8 CRITICAL
Network 		phpgurukul teachers_record_management_system Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthentic… CWE-89
SQL Injection 		CVE-2021-26822 2024-11-21 14:56 2021-02-16 Show GitHub Exploit DB Packet Storm
194479 9.9 CRITICAL
Network 		nedi nedi NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP POST parameter. This allows an attacker to obtain access to t… CWE-863
 Incorrect Authorization 		CVE-2021-26753 2024-11-21 14:56 2021-02-13 Show GitHub Exploit DB Packet Storm
194480 8.8 HIGH
Network 		nedi nedi NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag HTTP GET parameter. This allows an attack… CWE-78
OS Command  		CVE-2021-26752 2024-11-21 14:56 2021-02-13 Show GitHub Exploit DB Packet Storm