Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228641 7.5 危険 rifat kurban - tekno.Portal の makale.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1925 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
228642 7.5 危険 phpscripte24 - Hi Web Wiesbaden Live Shopping Multi Portal System の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1924 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
228643 7.5 危険 phpscripte24 - Hi Web Wiesbaden Web Social Network Freunde Community System の user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1923 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
228644 7.5 危険 xinha
s9y		 - Serendipity で使用されている Xinha WYSIWYG エディタにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1916 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
228645 4.3 警告 tufat - FlashCard の cPlayer.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1872 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
228646 6.8 警告 レッドハット - Red Hat Linux 用の JBoss Enterprise Application Platform で使用されている jboss-seam2 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1871 2012-12-20 19:29 2010-07-27 Show GitHub Exploit DB Packet Storm
228647 6.8 警告 realitymedias - RepairShop2 の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1857 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
228648 2.6 注意 realitymedias - RepairShop2 の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1856 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
228649 7.5 危険 phpscripte24 - Pay Per Watch & Bid Auktions System の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1855 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
228650 4.3 警告 phpscripte24 - Pay Per Watch & Bid Auktions System の auktion.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1854 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194301 6.3 MEDIUM
Network 		arubanetworks airwave A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management … CWE-78
OS Command  		CVE-2021-26970 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194302 6.8 MEDIUM
Network 		cncf spire In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issu… CWE-863
 Incorrect Authorization 		CVE-2021-27099 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194303 8.1 HIGH
Network 		cncf spire In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible iss… CWE-295
Improper Certificate Validation  		CVE-2021-27098 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194304 6.3 MEDIUM
Network 		arubanetworks airwave A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management … NVD-CWE-noinfo
CVE-2021-26971 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194305 6.5 MEDIUM
Network 		arubanetworks airwave A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Due to improper restrictions on XML ent… CWE-611
XXE 		CVE-2021-26969 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194306 4.8 MEDIUM
Network 		arubanetworks airwave A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the web-based management i… CWE-79
Cross-site Scripting 		CVE-2021-26968 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194307 6.5 MEDIUM
Network 		arubanetworks airwave A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an aut… CWE-89
SQL Injection 		CVE-2021-26966 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194308 6.5 MEDIUM
Network 		arubanetworks airwave A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an aut… CWE-89
SQL Injection 		CVE-2021-26965 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194309 7.2 HIGH
Network 		arubanetworks airwave A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remo… NVD-CWE-noinfo
CVE-2021-26963 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm
194310 6.1 MEDIUM
Network 		arubanetworks airwave A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the web-based management interface of… CWE-79
Cross-site Scripting 		CVE-2021-26967 2024-11-21 14:57 2021-03-6 Show GitHub Exploit DB Packet Storm