Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229791 6.8 警告 phpgroupware - phpgw の about.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0403 2012-12-20 19:28 2010-05-19 Show GitHub Exploit DB Packet Storm
229792 9.3 危険 thegreenbow - TheGreenBow IPSec VPN Client の vpnconf.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0392 2012-12-20 19:28 2010-01-26 Show GitHub Exploit DB Packet Storm
229793 6.8 警告 phpf1 - PHP F1 Max の Image Uploader における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2010-0390 2012-12-20 19:28 2010-01-26 Show GitHub Exploit DB Packet Storm
229794 5 警告 サン・マイクロシステムズ - Sun Java System Web Server の admin サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0389 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
229795 5 警告 The Tor Project - Tor におけるブリッジ ID などについて重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0385 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
229796 2.1 注意 The Tor Project - Tor におけるクライアントの ID を特定される脆弱性 CWE-200
情報漏えい
CVE-2010-0384 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
229797 5 警告 The Tor Project - Tor におけるトラフィックの送信元などの匿名性を侵害される脆弱性 CWE-200
情報漏えい
CVE-2010-0383 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
229798 7.5 危険 phpmyspace - PHP MySpace の modules/arcade/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0381 2012-12-20 19:28 2010-01-22 Show GitHub Exploit DB Packet Storm
229799 7.5 危険 phpmyspace - PHP MySpace の modules/arcade/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0377 2012-12-20 19:28 2010-01-21 Show GitHub Exploit DB Packet Storm
229800 3.5 注意 thomas turnbull
roger lopez
- Drupal 用の Node Blocks モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0370 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195481 9.8 CRITICAL
Network
tendacn g1_firmware
g3_firmware
Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountU… CWE-119
CWE-78
Incorrect Access of Indexable Resource ('Range Error') 
OS Command 
CVE-2021-27692 2024-11-21 14:58 2021-04-16 Show GitHub Exploit DB Packet Storm
195482 9.8 CRITICAL
Network
tendacn g0_firmware
g1_firmware
g3_firmware
Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)… CWE-119
CWE-78
Incorrect Access of Indexable Resource ('Range Error') 
OS Command 
CVE-2021-27691 2024-11-21 14:58 2021-04-16 Show GitHub Exploit DB Packet Storm
195483 4.8 MEDIUM
Network
tribalsystems zenario Cross Site Scripting (XSS) in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "cID… CWE-79
Cross-site Scripting
CVE-2021-27673 2024-11-21 14:58 2021-04-15 Show GitHub Exploit DB Packet Storm
195484 4.9 MEDIUM
Network
tribalsystems zenario SQL Injection in the "admin_boxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID… CWE-89
SQL Injection
CVE-2021-27672 2024-11-21 14:58 2021-04-15 Show GitHub Exploit DB Packet Storm
195485 6.5 MEDIUM
Network
phpgurukul beauty_parlour_management_system SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into t… CWE-89
SQL Injection
CVE-2021-27545 2024-11-21 14:58 2021-04-15 Show GitHub Exploit DB Packet Storm
195486 7.5 HIGH
Network
jtekt pc10g-cpu_tcc-6353_firmware
pc10ge_tcc-6464_firmware
pc10p_tcc-6372_firmware
pc10p-dp_tcc-6726_firmware
pc10p-dp-io_tcc-6752_firmware
pc10b-p_tcc-6373_firmware
pc10b_tcc-1021_firmwa…
If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-D… - CVE-2021-27458 2024-11-21 14:58 2021-04-20 Show GitHub Exploit DB Packet Storm
195487 4.8 MEDIUM
Network
phpgurukul beauty_parlour_management_system Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into t… CWE-79
Cross-site Scripting
CVE-2021-27544 2024-11-21 14:58 2021-04-15 Show GitHub Exploit DB Packet Storm
195488 9.8 CRITICAL
Network
apache tapestry A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have … CWE-502
 Deserialization of Untrusted Data
CVE-2021-27850 2024-11-21 14:58 2021-04-15 Show GitHub Exploit DB Packet Storm
195489 9.8 CRITICAL
Network
totolink x5000r_firmware
a720r_firmware
Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS comman… CWE-78
OS Command 
CVE-2021-27710 2024-11-21 14:58 2021-04-15 Show GitHub Exploit DB Packet Storm
195490 9.8 CRITICAL
Network
totolink x5000r_firmware
a720r_firmware
Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS comman… CWE-78
OS Command 
CVE-2021-27708 2024-11-21 14:58 2021-04-15 Show GitHub Exploit DB Packet Storm