Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252661	10	危険	サイバートラスト株式会社ターボリナックスレッドハット	-	Info-ZIP Zip のファイル名やパス名の解析処理におけるバッファオーバーフローの脆弱性	-	CVE-2004-1010	2012-04-18 14:32	2004-11-3	Show	GitHub Exploit DB Packet Storm

252662	6.4	警告	アップルサイバートラスト株式会社 Mozilla Foundation VMware レッドハット	-	Mozilla NSS における X.509 証明書を偽装される脆弱性	CWE-310 暗号の問題	CVE-2009-2409	2012-04-18 10:03	2009-07-30	Show	GitHub Exploit DB Packet Storm

252663	3.5	注意	サン・マイクロシステムズ Quagga サイバートラスト株式会社レッドハット	-	Quagga の bgpd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-4826	2012-04-17 18:25	2007-09-7	Show	GitHub Exploit DB Packet Storm

252664	5	警告	Quagga レッドハット	-	Quagga の bgpd におけるサービス運用妨害（Null ポインタデリファレンスおよびアプリケーションクラッシュ）の脆弱性	CWE-Other その他	CVE-2010-1674	2012-04-17 18:23	2011-03-29	Show	GitHub Exploit DB Packet Storm

252665	5	警告	Quagga レッドハット	-	Quagga の bgpd におけるサービス運用妨害 (セッションリセット) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1675	2012-04-17 18:22	2011-03-29	Show	GitHub Exploit DB Packet Storm

252666	6.5	警告	Quagga サイバートラスト株式会社レッドハット	-	Quagga の bgpd の bgp_route_refresh_receive 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2948	2012-04-17 18:20	2010-08-19	Show	GitHub Exploit DB Packet Storm

252667	5	警告	Quagga レッドハット	-	Quagga の bgpd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2949	2012-04-17 18:19	2010-08-19	Show	GitHub Exploit DB Packet Storm

252668	4.3	警告	Artifex Software	-	Ghostscript の gs_type2_interpret 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-4054	2012-04-17 17:38	2010-10-23	Show	GitHub Exploit DB Packet Storm

252669	9.3	危険	アップルレッドハット	-	複数の Apple 製品の LIBTIFF におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0192	2012-04-17 17:32	2011-03-3	Show	GitHub Exploit DB Packet Storm

252670	4.3	警告	LibTIFF レッドハット	-	LibTIFF の tiffdump.c 内にある ReadDirectory 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4665	2012-04-17 17:30	2011-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194751	8.8	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 2020…	NVD-CWE-noinfo	CVE-2021-29754	2024-11-21 15:01	2021-06-12	Show	GitHub Exploit DB Packet Storm

194752	7.4	HIGH Network	wp-cli	wp-cli	WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communicat…	-	CVE-2021-29504	2024-11-21 15:01	2021-06-8	Show	GitHub Exploit DB Packet Storm

194753	7.5	HIGH Network	bubble_fireworks_project	bubble_fireworks	bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly ver…	-	CVE-2021-29500	2024-11-21 15:01	2021-06-5	Show	GitHub Exploit DB Packet Storm

194754	5.4	MEDIUM Network	ibm	rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…	CWE-79 Cross-site Scripting	CVE-2021-29670	2024-11-21 15:01	2021-06-3	Show	GitHub Exploit DB Packet Storm

194755	5.4	MEDIUM Network	ibm	rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…	CWE-79 Cross-site Scripting	CVE-2021-29668	2024-11-21 15:01	2021-06-3	Show	GitHub Exploit DB Packet Storm

194756	7.8	HIGH Local	ibm	spectrum_scale	IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context…	CWE-134 Use of Externally-Controlled Format String	CVE-2021-29740	2024-11-21 15:01	2021-06-1	Show	GitHub Exploit DB Packet Storm

194757	7.8	HIGH Local	ibm	security_verify_access	IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with ele…	CWE-787 Out-of-bounds Write	CVE-2021-29665	2024-11-21 15:01	2021-06-1	Show	GitHub Exploit DB Packet Storm

194758	6.5	MEDIUM Network	genivi	diagnostic_log_and_trace	GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vul…	NVD-CWE-noinfo	CVE-2021-29507	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

194759	8.8	HIGH Network	xstream_project debian fedoraproject netapp oracle	xstream debian_linux fedora snapmanager webcenter_portal webcenter_sites communications_unified_inventory_management enterprise_manager_ops_center banking_credit_facilities_pr…	XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of th…	-	CVE-2021-29505	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

194760	8.3	HIGH Network	envoyproxy	envoy	Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path wi…	-	CVE-2021-29492	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed