Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250601	5	警告	OpenTTD	-	OpenTTD におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4168	2012-03-27 18:42	2010-11-17	Show	GitHub Exploit DB Packet Storm

250602	7.5	危険	Joomla!	-	Joomla! における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4166	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250603	6.9	警告	Mono Project	-	Mono の metadata/loader.c における権限を取得される脆弱性	CWE-Other その他	CVE-2010-4159	2012-03-27 18:42	2010-09-26	Show	GitHub Exploit DB Packet Storm

250604	4.3	警告	exv2	-	eXV2 CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4155	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250605	9.3	危険	rhinosoft	-	Rhino の FTP Voyager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4154	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250606	9.3	危険	crossftp	-	CrossFTP Pro におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4153	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250607	7.5	危険	4site	-	4site CMS の catalog/index.shtml における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4152	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250608	6.8	警告	deluxebb	-	DeluxeBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4151	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250609	9.3	危険	freshwebmaster	-	FreshWebMaster Fresh FTP におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4149	2012-03-27 18:42	2010-11-1	Show	GitHub Exploit DB Packet Storm

250610	9.3	危険	anyconnect	-	AnyConnect におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4148	2012-03-27 18:42	2010-11-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195961	5.4	MEDIUM Network	ibm	rational_quality_manager rhapsody_design_manager rational_engineering_lifecycle_manager rhapsody_model_manager engineering_workflow_management collaborative_lifecycle_management eng…	IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential…	CWE-79 Cross-site Scripting	CVE-2021-20357	2024-11-21 14:46	2021-01-28	Show	GitHub Exploit DB Packet Storm

195962	8.1	HIGH Network	fasterxml netapp apache debian oracle	jackson-databind oncommand_insight service_level_manager oncommand_api_services active_iq_unified_manager nifi debian_linux commerce_guided_search_and_experience_manager	A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidential…	-	CVE-2021-20190	2024-11-21 14:46	2021-01-20	Show	GitHub Exploit DB Packet Storm

195963	6.1	MEDIUM Network	weseek	growi	Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2021-20619	2024-11-21 14:46	2021-01-19	Show	GitHub Exploit DB Packet Storm

195964	9.8	CRITICAL Network	acmailer	acmailer_db acmailer	Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege wh…	CWE-269 Improper Privilege Management	CVE-2021-20618	2024-11-21 14:46	2021-01-14	Show	GitHub Exploit DB Packet Storm

195965	9.8	CRITICAL Network	acmailer	acmailer acmailer_db	Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative …	NVD-CWE-Other	CVE-2021-20617	2024-11-21 14:46	2021-01-14	Show	GitHub Exploit DB Packet Storm

195966	7.8	HIGH Local	skygroup	skysea_client_view	Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	CWE-427 Uncontrolled Search Path Element	CVE-2021-20616	2024-11-21 14:46	2021-01-13	Show	GitHub Exploit DB Packet Storm

195967	7.5	HIGH Network	sonicwall	global_management_system	SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files.	CWE-22 Path Traversal	CVE-2021-20030	2024-11-21 14:45	2022-10-13	Show	GitHub Exploit DB Packet Storm

195968	7.8	HIGH Local	sonicwall	global_vpn_client	SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation …	CWE-427 Uncontrolled Search Path Element	CVE-2021-20051	2024-11-21 14:45	2022-05-5	Show	GitHub Exploit DB Packet Storm

195969	7.8	HIGH Local	qualcomm	ar8035_firmware csr8811_firmware ipq6000_firmware ipq6005_firmware ipq6010_firmware ipq6018_firmware ipq6028_firmware qca4024_firmware qca6390_firmware qca6391_firmware …	Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapd…	CWE-287 Improper Authentication	CVE-2021-1950	2024-11-21 14:45	2022-04-1	Show	GitHub Exploit DB Packet Storm

195970	8.8	HIGH Local	qualcomm	aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware fsm10055_firmware fsm10056_firmware mdm9150_firmware qca6390_firmware qca6391_firmware<…	Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…	CWE-787 Out-of-bounds Write	CVE-2021-1942	2024-11-21 14:45	2022-04-1	Show	GitHub Exploit DB Packet Storm