Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251051	6.8	警告	IBM	-	IBM OmniFind の ESAdmin/security.do におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3891	2012-03-27 18:42	2010-11-12	Show	GitHub Exploit DB Packet Storm

251052	4.3	警告	IBM	-	IBM OmniFind におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3890	2012-03-27 18:42	2010-11-12	Show	GitHub Exploit DB Packet Storm

251053	1.9	注意	Linux	-	Linux kernel の ax25_getname 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3875	2012-03-27 18:42	2011-01-3	Show	GitHub Exploit DB Packet Storm

251054	7.8	危険	Linux	-	Linux kernel の X.25 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3873	2012-03-27 18:42	2011-01-3	Show	GitHub Exploit DB Packet Storm

251055	7.2	危険	マイクロソフト	-	Microsoft Windows の 32 ビットプラットフォームにおける権限昇格の脆弱性	CWE-noinfo 情報不足	CVE-2010-3889	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251056	7.2	危険	マイクロソフト	-	Microsoft Windows の 32 ビットプラットフォームにおける権限昇格の脆弱性	CWE-noinfo 情報不足	CVE-2010-3888	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251057	4.3	警告	アップル	-	Apple の Mac OS X の Limit Mail 機能におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3887	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251058	4.3	警告	マイクロソフト	-	Microsoft mshtml.dll の sertIntoTimeoutList 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3886	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251059	6.8	警告	CMS Made Simple	-	CMS Made Simple における管理者パスワードのリセット要求の管理者認証をハイジャックされる脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3884	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251060	6.8	警告	CMS Made Simple	-	CMS Made Simple の Change Group Permissions モジュールにおけるクロスサイトリクエストフォージェリ脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3883	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195511	9.8	CRITICAL Network	microfocus	operations_bridge_manager	Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user auth…	CWE-287 Improper Authentication	CVE-2021-22507	2024-11-21 14:50	2021-04-9	Show	GitHub Exploit DB Packet Storm

195512	6.5	MEDIUM Network	github	enterprise_server	An improper access control vulnerability was identified in GitHub Enterprise Server that allowed access tokens generated from a GitHub App's web authentication flow to read private repository metadat…	NVD-CWE-Other	CVE-2021-22865	2024-11-21 14:50	2021-04-3	Show	GitHub Exploit DB Packet Storm

195513	7.5	HIGH Network	apache oracle	cxf business_intelligence communications_session_route_manager communications_session_report_manager communications_element_manager communications_diameter_intelligence_hub	CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR))…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-22696	2024-11-21 14:50	2021-04-2	Show	GitHub Exploit DB Packet Storm

195514	3.7	LOW Network	haxx fedoraproject netapp broadcom debian siemens oracle splunk	libcurl fedora solidfire hci_management_node hci_storage_node fabric_operating_system debian_linux sinec_infrastructure_network_services communications_billing_and_revenue_man…	curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.…	CWE-290 Authentication Bypass by Spoofing	CVE-2021-22890	2024-11-21 14:50	2021-04-2	Show	GitHub Exploit DB Packet Storm

195515	5.3	MEDIUM Network	haxx fedoraproject netapp broadcom debian siemens oracle splunk	libcurl fedora solidfire hci_management_node hci_storage_node hci_compute_node fabric_operating_system debian_linux sinec_infrastructure_network_services communications_bil…	curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip o…	CWE-200 Information Exposure	CVE-2021-22876	2024-11-21 14:50	2021-04-2	Show	GitHub Exploit DB Packet Storm

195516	8.8	HIGH Network	google	exposure_notifications_verification_server	A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0.23.1), allows an attacker who (1) has UserWrite permissions and (2) is using a…	CWE-276 Incorrect Default Permissions	CVE-2021-22538	2024-11-21 14:50	2021-04-1	Show	GitHub Exploit DB Packet Storm

195517	6.1	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message.…	CWE-79 Cross-site Scripting	CVE-2021-22886	2024-11-21 14:50	2021-03-27	Show	GitHub Exploit DB Packet Storm

195518	7.5	HIGH Network	microfocus	access_manager	Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.	NVD-CWE-noinfo	CVE-2021-22506	2024-11-21 14:50	2021-03-26	Show	GitHub Exploit DB Packet Storm

195519	6.1	MEDIUM Network	revive-adserver	revive_adserver	Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly other scripts) due to single quotes not being escaped. An att…	CWE-79 Cross-site Scripting	CVE-2021-22889	2024-11-21 14:50	2021-03-26	Show	GitHub Exploit DB Packet Storm

195520	6.1	MEDIUM Network	revive-adserver	revive_adserver	Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones.php. An attacker could trick a user with access to the user interface of …	CWE-79 Cross-site Scripting	CVE-2021-22888	2024-11-21 14:50	2021-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed