Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228981 4.3 警告 x10media - x10 MP3 Search engine におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3153 2012-12-20 19:28 2009-09-10 Show GitHub Exploit DB Packet Storm
228982 5 警告 ultrize - Ultrize TimeSheet の actions/downloadFile.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3151 2012-12-20 19:28 2009-09-10 Show GitHub Exploit DB Packet Storm
228983 7.5 危険 portalxp - PortalXP Teacher Edition における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3148 2012-12-20 19:28 2009-09-10 Show GitHub Exploit DB Packet Storm
228984 5 警告 visavi - Wap-Motor の gallery/gallery.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3123 2012-12-20 19:28 2009-09-9 Show GitHub Exploit DB Packet Storm
228985 7.5 危険 x-iweb.ru - PHP-Fusion 用の dsmsf モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3119 2012-12-20 19:28 2009-09-9 Show GitHub Exploit DB Packet Storm
228986 7.5 危険 snowhall - Snow Hall Silurus System の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3117 2012-12-20 19:28 2009-09-9 Show GitHub Exploit DB Packet Storm
228987 7.5 危険 Uiga - Uiga Church Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3116 2012-12-20 19:28 2009-09-9 Show GitHub Exploit DB Packet Storm
228988 5 警告 SolarWinds - SolarWinds TFTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-3115 2012-12-20 19:28 2009-09-9 Show GitHub Exploit DB Packet Storm
228989 5.8 警告 シマンテック - Symantec Altiris Deployment Solution のファイル転送機能における重要なファイルを読み取られる脆弱性 CWE-362
競合状態
CVE-2009-3110 2012-12-20 19:28 2009-08-26 Show GitHub Exploit DB Packet Storm
228990 9.3 危険 シマンテック - Symantec Altiris Deployment Solution の AClient エージェントにおける認証を回避される脆弱性 CWE-noinfo
情報不足
CVE-2009-3109 2012-12-20 19:28 2009-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194761 7.8 HIGH
Local
canonical apport It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel. CWE-20
 Improper Input Validation 
CVE-2021-25683 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194762 7.8 HIGH
Local
canonical apport It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel. CWE-74
Injection
CVE-2021-25682 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194763 6.5 MEDIUM
Network
jerryscript jerryscript An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file. CWE-416
 Use After Free
CVE-2021-26199 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194764 6.5 MEDIUM
Network
jerryscript jerryscript An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma-helpers.c file. NVD-CWE-noinfo
CVE-2021-26198 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194765 6.5 MEDIUM
Network
jerryscript jerryscript An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file. CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2021-26197 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194766 8.8 HIGH
Network
jerryscript jerryscript An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file. CWE-787
 Out-of-bounds Write
CVE-2021-26195 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194767 6.5 MEDIUM
Network
jerryscript jerryscript An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file. CWE-416
 Use After Free
CVE-2021-26194 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194768 9.8 CRITICAL
Network
set-getter_project set-getter Prototype pollution vulnerability in 'set-getter' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2021-25949 2024-11-21 14:55 2021-06-10 Show GitHub Exploit DB Packet Storm
194769 9.8 CRITICAL
Network
expand-hash_project expand-hash Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2021-25948 2024-11-21 14:55 2021-06-10 Show GitHub Exploit DB Packet Storm
194770 5.5 MEDIUM
Local
openexr
fedoraproject
debian
openexr
fedora
debian_linux
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR… - CVE-2021-26260 2024-11-21 14:55 2021-06-8 Show GitHub Exploit DB Packet Storm