Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253061 4.3 警告 Coppermine Photo Gallery - CPG におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4667 2012-03-27 18:42 2011-06-14 Show GitHub Exploit DB Packet Storm
253062 10 危険 CMS Made Simple - CMSMS のNews モジュールにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2010-4663 2012-03-27 18:42 2011-06-8 Show GitHub Exploit DB Packet Storm
253063 4.3 警告 Hastymail - Hastymail2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4646 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
253064 10 危険 Novell - Novell GroupWise の IMAP サーバコンポーネンにおけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4711 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
253065 4.3 警告 Yahoo! - YUI のメニューウィジェットにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4710 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
253066 7.5 危険 Joomla! - Joomla! における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4696 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
253067 4.3 警告 XWiki - XWiki Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4642 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
253068 7.5 危険 XWiki - XWiki Enterprise における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4641 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
253069 4.3 警告 XWiki - XWiki Watch におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4640 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
253070 7.5 危険 intendance - MySource Matrix の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4639 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194921 5.4 MEDIUM
Network 		ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin… CWE-79
Cross-site Scripting 		CVE-2021-29666 2024-11-21 15:01 2021-04-28 Show GitHub Exploit DB Packet Storm
194922 9.8 CRITICAL
Network 		alibaba nacos Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=tr… CWE-290
 Authentication Bypass by Spoofing 		CVE-2021-29441 2024-11-21 15:01 2021-04-28 Show GitHub Exploit DB Packet Storm
194923 5.4 MEDIUM
Network 		getkirby kirby Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file can be sent to othe… - CVE-2021-29460 2024-11-21 15:01 2021-04-28 Show GitHub Exploit DB Packet Storm
194924 5.8 MEDIUM
Network 		hedgedoc hedgedoc HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's filesystem due to an improper input validation, which… CWE-22
Path Traversal 		CVE-2021-29474 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194925 10.0 CRITICAL
Network 		hedgedoc hedgedoc HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code i… CWE-94
CWE-918
Code Injection
Server-Side Request Forgery (SSRF)  		CVE-2021-29475 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194926 7.5 HIGH
Network 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 200258. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2021-29694 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194927 7.8 HIGH
Local 		ibm spectrum_protect_client
spectrum_protect_for_space_management 		IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker c… CWE-787
 Out-of-bounds Write 		CVE-2021-29672 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194928 2.5 LOW
Local 		exiv2
fedoraproject
debian 		exiv2
fedora
debian_linux 		Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv… - CVE-2021-29473 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194929 6.5 MEDIUM
Network 		exiv2
fedoraproject 		exiv2
fedora 		Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The o… - CVE-2021-29470 2024-11-21 15:01 2021-04-24 Show GitHub Exploit DB Packet Storm
194930 7.5 HIGH
Network 		redis.js redis Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings… NVD-CWE-Other
CVE-2021-29469 2024-11-21 15:01 2021-04-24 Show GitHub Exploit DB Packet Storm