Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251291	5	警告	シマンテックインテル	-	Symantec Antivirus Corporate Edition などで使用される Intel AMS の GetStringAMSHandler 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3268	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

251292	6.5	警告	ifdefined	-	BugTracker.NET における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3267	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

251293	3.5	注意	ifdefined	-	BugTracker.NET におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3266	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

251294	2.1	注意	Novell	-	Novell Identity Manager のエンジンインストーラにおける重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3264	2012-03-27 18:42	2010-08-23	Show	GitHub Exploit DB Packet Storm

251295	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の setup/frames/index.inc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3263	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251296	4.3	警告	flock	-	Flock Browser におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3262	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251297	5	警告	RSAセキュリティ	-	RSA Authentication Agent for Web におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3261	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

251298	2.1	注意	Blackboard, Inc.	-	Blackboard Transact Suite の自動バックアップ機能における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3245	2012-03-27 18:42	2010-09-7	Show	GitHub Exploit DB Packet Storm

251299	4.3	警告	Netwin Ltd	-	NetWin Surgemail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3201	2012-03-27 18:42	2011-01-7	Show	GitHub Exploit DB Packet Storm

251300	4.6	警告	Blackboard, Inc.	-	Blackboard Transact Suite におけるデータベースのパスワードを発見される脆弱性	CWE-200 情報漏えい	CVE-2010-3244	2012-03-27 18:42	2010-09-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195381	7.0	HIGH Local	linux debian netapp	linux_kernel debian_linux h410c_firmware h300s_firmware h500s_firmware h700s_firmware h410s_firmware	A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past t…	CWE-415 Double Free	CVE-2021-22600	2024-11-21 14:50	2022-01-26	Show	GitHub Exploit DB Packet Storm

195382	5.5	MEDIUM Local	google debian fedoraproject oracle netapp	protobuf debian_linux fedora mysql snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager	Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error m…	CWE-476 NULL Pointer Dereference	CVE-2021-22570	2024-11-21 14:50	2022-01-26	Show	GitHub Exploit DB Packet Storm

195383	9.8	CRITICAL Network	google	fuchsia	An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to b…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-22566	2024-11-21 14:50	2022-01-18	Show	GitHub Exploit DB Packet Storm

195384	5.5	MEDIUM Local	google oracle	protobuf-kotlin protobuf-java google-protobuf communications_cloud_native_core_console communications_cloud_native_core_policy communications_cloud_native_core_network_repository_funct…	An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser fo…	NVD-CWE-noinfo	CVE-2021-22569	2024-11-21 14:50	2022-01-10	Show	GitHub Exploit DB Packet Storm

195385	3.5	LOW Network	dart	dart_software_development_kit	Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacke…	NVD-CWE-Other	CVE-2021-22567	2024-11-21 14:50	2022-01-5	Show	GitHub Exploit DB Packet Storm

195386	9.8	CRITICAL Network	myscada	mypro	mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.	-	CVE-2021-22657	2024-11-21 14:50	2021-12-24	Show	GitHub Exploit DB Packet Storm

195387	8.8	HIGH Network	dart	dart_software_development_kit	When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. U…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2021-22568	2024-11-21 14:50	2021-12-10	Show	GitHub Exploit DB Packet Storm

195388	6.5	MEDIUM Network	google	exposure_notification_verification_server	An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading …	NVD-CWE-Other	CVE-2021-22565	2024-11-21 14:50	2021-12-9	Show	GitHub Exploit DB Packet Storm

195389	5.4	MEDIUM Network	huawei	imaster_nce-fabric_firmware	There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input af…	CWE-79 Cross-site Scripting	CVE-2021-22410	2024-11-21 14:50	2021-11-24	Show	GitHub Exploit DB Packet Storm

195390	6.5	MEDIUM Network	github	enterprise_server	A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit this vulnerability, an attacker would ne…	CWE-22 Path Traversal	CVE-2021-22870	2024-11-21 14:50	2021-11-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed