Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252971	7.5	危険	joomlaseller Joomla!	-	Joomla! の com_jscalendar コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4795	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

252972	4.3	警告	joomlaseller Joomla!	-	Joomla! の com_jscalendar コンポーネントにおけるクロスサイトスクリプティング脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4794	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

252973	7.5	危険	site2nite	-	Site2Nite Auto e-Manager の detail.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4793	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

252974	4.3	警告	openit	-	OPEN IT OverLook の title.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4792	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

252975	4	警告	IBM	-	IBM WCM のオーサリングツールにおけるドラフト生成のアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4806	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

252976	7.5	危険	marcusg	-	PHP-Fusion の MG User-Fotoalbum モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4791	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

252977	5.8	警告	in-mediakg	-	FilterFTP におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4790	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

252978	6.8	警告	PHP Web Scripts	-	PHP Web Scripts Easy Banner Free の member.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4784	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

252979	2.6	注意	PHP Web Scripts	-	PHP Web Scripts Easy Banner Free の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4783	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

252980	7.5	危険	softwebsnepal	-	Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4782	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194751	8.8	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 2020…	NVD-CWE-noinfo	CVE-2021-29754	2024-11-21 15:01	2021-06-12	Show	GitHub Exploit DB Packet Storm

194752	7.4	HIGH Network	wp-cli	wp-cli	WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communicat…	-	CVE-2021-29504	2024-11-21 15:01	2021-06-8	Show	GitHub Exploit DB Packet Storm

194753	7.5	HIGH Network	bubble_fireworks_project	bubble_fireworks	bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly ver…	-	CVE-2021-29500	2024-11-21 15:01	2021-06-5	Show	GitHub Exploit DB Packet Storm

194754	5.4	MEDIUM Network	ibm	rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…	CWE-79 Cross-site Scripting	CVE-2021-29670	2024-11-21 15:01	2021-06-3	Show	GitHub Exploit DB Packet Storm

194755	5.4	MEDIUM Network	ibm	rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…	CWE-79 Cross-site Scripting	CVE-2021-29668	2024-11-21 15:01	2021-06-3	Show	GitHub Exploit DB Packet Storm

194756	7.8	HIGH Local	ibm	spectrum_scale	IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context…	CWE-134 Use of Externally-Controlled Format String	CVE-2021-29740	2024-11-21 15:01	2021-06-1	Show	GitHub Exploit DB Packet Storm

194757	7.8	HIGH Local	ibm	security_verify_access	IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with ele…	CWE-787 Out-of-bounds Write	CVE-2021-29665	2024-11-21 15:01	2021-06-1	Show	GitHub Exploit DB Packet Storm

194758	6.5	MEDIUM Network	genivi	diagnostic_log_and_trace	GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vul…	NVD-CWE-noinfo	CVE-2021-29507	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

194759	8.8	HIGH Network	xstream_project debian fedoraproject netapp oracle	xstream debian_linux fedora snapmanager webcenter_portal webcenter_sites communications_unified_inventory_management enterprise_manager_ops_center banking_credit_facilities_pr…	XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of th…	-	CVE-2021-29505	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

194760	8.3	HIGH Network	envoyproxy	envoy	Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path wi…	-	CVE-2021-29492	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed