Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228651	4	警告	フェンリル株式会社	-	Sleipnir Mobile for Android において任意のエクステンション API が呼び出される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2304	2013-04-12 12:01	2013-04-12	Show	GitHub Exploit DB Packet Storm

228652	4.3	警告	Splunk	-	Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2766	2013-04-12 11:04	2013-03-25	Show	GitHub Exploit DB Packet Storm

228653	5	警告	Puppet	-	Puppet Labs の Puppet Enterprise におけるコンソールアクセスを取得される脆弱性	CWE-310 暗号の問題	CVE-2013-2716	2013-04-12 11:03	2013-03-28	Show	GitHub Exploit DB Packet Storm

228654	7.5	危険	Digineo	-	Ruby 用 Thumbshooter gem の lib/thumbshooter.rb における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1898	2013-04-11 19:42	2013-03-25	Show	GitHub Exploit DB Packet Storm

228655	7.5	危険	Dan Kubb	-	Ruby 用 extlib gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1802	2013-04-11 19:41	2013-01-14	Show	GitHub Exploit DB Packet Storm

228656	7.5	危険	John Nunemaker	-	Ruby 用 httparty gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1801	2013-04-11 19:41	2013-01-14	Show	GitHub Exploit DB Packet Storm

228657	7.5	危険	John Nunemaker	-	Ruby 用 crack gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1800	2013-04-11 19:40	2013-01-14	Show	GitHub Exploit DB Packet Storm

228658	7.5	危険	Daniel Harrington	-	Ruby 用 nori gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0285	2013-04-11 19:39	2013-01-14	Show	GitHub Exploit DB Packet Storm

228659	5	警告	New Relic	-	Ruby Agent における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-0284	2013-04-11 19:38	2013-02-13	Show	GitHub Exploit DB Packet Storm

228660	6.8	警告	Michael Bleigh and Intridea, Inc.	-	Ruby 用 omniauth-oauth2 gem におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-6134	2013-04-11 19:37	2013-02-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
193881	5.3	MEDIUM Network	oracle	applications_framework	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily explo…	NVD-CWE-noinfo	CVE-2021-2477	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193882	5.3	MEDIUM Network	oracle	transportation_management	Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is 6.4.3. Easily exploitable vulnerability all…	NVD-CWE-noinfo	CVE-2021-2476	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193883	4.4	MEDIUM Local	oracle	vm_virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high p…	NVD-CWE-noinfo	CVE-2021-2475	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193884	8.1	HIGH Network	oracle	web_analytics	Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low pr…	NVD-CWE-noinfo	CVE-2021-2474	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193885	5.9	MEDIUM Network	oracle quarkus	communications_cloud_native_core_security_edge_protection_proxy mysql_connectors communications_cloud_native_core_console communications_cloud_native_core_policy communications_cloud_nati…	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privi…	NVD-CWE-noinfo	CVE-2021-2471	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193886	8.3	HIGH Network	oracle	communications_interactive_session_recorder	Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Provision API). The supported version that is affected is 6.4. Easily exploitable …	NVD-CWE-noinfo	CVE-2021-2461	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193887	4.9	MEDIUM Network	oracle	communications_session_border_controller	Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vu…	NVD-CWE-noinfo	CVE-2021-2416	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193888	6.8	MEDIUM Network	oracle	communications_session_border_controller	Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vu…	NVD-CWE-noinfo	CVE-2021-2414	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193889	7.8	HIGH Local	qualcomm	ar8031_firmware csra6620_firmware csra6640_firmware fsm10055_firmware fsm10056_firmware mdm9150_firmware qca6174a_firmware qca6391_firmware qca6564a_firmware qca6564au_firm…	Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2021-30316	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

193890	7.5	HIGH Network	qualcomm	apq8053_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar9380_firmware csr8811_firmware csra6620_firmware csra6640_firmware fsm10055_firmware fsm10056_firmware	Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago…	CWE-287 Improper Authentication	CVE-2021-30312	2024-11-21 15:03	2021-10-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed