Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249051 5 警告 TYPO3 Association - TYPO3 の mod/tools/em/class.em_unzip.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-5102 2012-05-23 16:47 2010-12-16 Show GitHub Exploit DB Packet Storm
249052 4 警告 TYPO3 Association - TYPO3 の TypoScript 設定におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-5101 2012-05-23 16:47 2010-12-16 Show GitHub Exploit DB Packet Storm
249053 3.5 注意 TYPO3 Association - TYPO3 の Install ツールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5100 2012-05-23 16:42 2010-12-16 Show GitHub Exploit DB Packet Storm
249054 3.5 注意 TYPO3 Association - TYPO3 の FORM コンテンツオブジェクトにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5098 2012-05-23 16:41 2010-12-16 Show GitHub Exploit DB Packet Storm
249055 2.6 注意 TYPO3 Association - TYPO3 のクリック拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5097 2012-05-23 16:23 2010-12-16 Show GitHub Exploit DB Packet Storm
249056 6.4 警告 Atlassian - 複数の Atlassian 製品における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2926 2012-05-23 16:23 2012-05-22 Show GitHub Exploit DB Packet Storm
249057 2.6 注意 Xelex - Android 用の Xelex MobileTrack アプリケーションにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2567 2012-05-23 15:35 2012-05-22 Show GitHub Exploit DB Packet Storm
249058 7.6 危険 Xelex - Android 用の Xelex MobileTrack アプリケーションにおけるコマンドを実行される脆弱性 CWE-20
CWE-287
CVE-2012-2562 2012-05-23 15:33 2012-05-22 Show GitHub Exploit DB Packet Storm
249059 10 危険 シマンテック - Symantec Web Gateway の管理画面における任意のコードをアップロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0299 2012-05-23 13:50 2012-05-17 Show GitHub Exploit DB Packet Storm
249060 6.4 警告 シマンテック - Symantec Web Gateway の管理画面のファイル管理スクリプトにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0298 2012-05-23 13:47 2012-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196951 5.4 MEDIUM
Network 		cybozu remote_service_manager Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2021-20798 2024-11-21 14:47 2021-10-13 Show GitHub Exploit DB Packet Storm
196952 5.4 MEDIUM
Network 		cybozu remote_service_manager Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue oc… CWE-79
Cross-site Scripting 		CVE-2021-20797 2024-11-21 14:47 2021-10-13 Show GitHub Exploit DB Packet Storm
196953 6.5 MEDIUM
Network 		cybozu remote_service_manager Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors. CWE-22
Path Traversal 		CVE-2021-20796 2024-11-21 14:47 2021-10-13 Show GitHub Exploit DB Packet Storm
196954 8.8 HIGH
Network 		cybozu remote_service_manager Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended… CWE-352
 Origin Validation Error 		CVE-2021-20795 2024-11-21 14:47 2021-10-13 Show GitHub Exploit DB Packet Storm
196955 3.3 LOW
Local 		adobe acrobat_dc
acrobat_reader_dc 		Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds Read vulnerability. An unauthenticated… - CVE-2021-21089 2024-11-21 14:47 2021-10-1 Show GitHub Exploit DB Packet Storm
196956 6.1 MEDIUM
Network 		weseek growi Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user w… CWE-79
Cross-site Scripting 		CVE-2021-20829 2024-11-21 14:47 2021-09-21 Show GitHub Exploit DB Packet Storm
196957 6.1 MEDIUM
Network 		activefusions order_status_batch_change Cross-site scripting vulnerability in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) all versions allows a remote attacker to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2021-20828 2024-11-21 14:47 2021-09-17 Show GitHub Exploit DB Packet Storm
196958 6.1 MEDIUM
Network 		shiro8 list_\(order_management\)_item_change Cross-site scripting vulnerability in List (order management) item change plug-in (for EC-CUBE 3.0 series) Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified v… CWE-79
Cross-site Scripting 		CVE-2021-20825 2024-11-21 14:47 2021-09-17 Show GitHub Exploit DB Packet Storm
196959 9.3 CRITICAL
Network 		jscom revoworks_browser Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the… NVD-CWE-Other
CVE-2021-20791 2024-11-21 14:47 2021-09-17 Show GitHub Exploit DB Packet Storm
196960 9.6 CRITICAL
Network 		jscom revoworks_browser Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors. NVD-CWE-Other
CVE-2021-20790 2024-11-21 14:47 2021-09-17 Show GitHub Exploit DB Packet Storm