Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228971 7.1 危険 マイクロソフト - Microsoft Windows Server の NFS サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-1281 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
228972 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2013-0018 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
228973 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1280 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
228974 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 9 におけるコンテンツを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-0015 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
228975 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルにおける権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1279 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
228976 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルにおける権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1278 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
228977 2.6 注意 グリー株式会社 - Android 版 GREE (グリー) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-0704 2013-02-14 12:01 2013-02-14 Show GitHub Exploit DB Packet Storm
228978 4.3 警告 imgboard.com CGIダウンロードセンター - imgboard におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0703 2013-02-14 12:00 2013-02-14 Show GitHub Exploit DB Packet Storm
228979 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-0653 2013-02-13 16:45 2013-01-22 Show GitHub Exploit DB Packet Storm
228980 9.3 危険 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0654 2013-02-13 16:44 2013-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195031 6.1 MEDIUM
Network
php-fusion phpfusion CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting
CVE-2021-28280 2024-11-21 14:59 2021-04-30 Show GitHub Exploit DB Packet Storm
195032 8.8 HIGH
Network
soyal 701client Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2021-28269 2024-11-21 14:59 2021-04-28 Show GitHub Exploit DB Packet Storm
195033 8.8 HIGH
Network
soyal 701server
701clientsql
701serversql
Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulne… CWE-276
Incorrect Default Permissions 
CVE-2021-28271 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
195034 6.1 MEDIUM
Network
apache superset Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allo… CWE-601
Open Redirect
CVE-2021-28125 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
195035 5.3 MEDIUM
Network
orangehrm orangehrm OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function. NVD-CWE-noinfo
CVE-2021-28399 2024-11-21 14:59 2021-04-26 Show GitHub Exploit DB Packet Storm
195036 6.1 MEDIUM
Network
jamovi jamovi Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a… CWE-79
Cross-site Scripting
CVE-2021-28079 2024-11-21 14:59 2021-04-26 Show GitHub Exploit DB Packet Storm
195037 6.5 MEDIUM
Network
eclipse openj9 In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static me… CWE-909
 Missing Initialization of Resource
CVE-2021-28167 2024-11-21 14:59 2021-04-22 Show GitHub Exploit DB Packet Storm
195038 4.9 MEDIUM
Network
unisys stealth Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format. NVD-CWE-Other
CVE-2021-28492 2024-11-21 14:59 2021-04-21 Show GitHub Exploit DB Packet Storm
195039 7.5 HIGH
Network
hashicorp consul HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10. NVD-CWE-noinfo
CVE-2021-28156 2024-11-21 14:59 2021-04-21 Show GitHub Exploit DB Packet Storm
195040 6.5 MEDIUM
Network
centreon centreon An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user. CWE-330
 Use of Insufficiently Random Values
CVE-2021-28055 2024-11-21 14:59 2021-04-16 Show GitHub Exploit DB Packet Storm