Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253151 6.5 警告 bouzouste - Primitive CMS の cms_write.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3482 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
253152 6.8 警告 ApPHP - ApPHP PHP MicroCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3481 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
253153 4.3 警告 g.rodola - pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2010-3494 2012-03-27 18:42 2009-04-1 Show GitHub Exploit DB Packet Storm
253154 6.8 警告 ApPHP - ApPHP PHP MicroCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3480 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
253155 7.5 危険 boutikone - BoutikOne の list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3479 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
253156 5 警告 OTRS プロジェクト - OTRS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-3476 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
253157 5.8 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2010-3473 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
253158 4.3 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3472 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
253159 4.3 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2010-3471 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
253160 4.3 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3470 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194851 5.5 MEDIUM
Local
linux
fedoraproject
netapp
linux_kernel
fedora
a250_firmware
aff_500f_firmware
fas_500f_firmware
cloud_backup
solidfire_baseboard_management_controller_firmware
An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concu… CWE-667
 Improper Locking
CVE-2021-28951 2024-11-21 15:00 2021-03-21 Show GitHub Exploit DB Packet Storm
194852 5.5 MEDIUM
Local
linux
fedoraproject
debian
linux_kernel
fedora
debian_linux
An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1. CWE-834
 Excessive Iteration
CVE-2021-28950 2024-11-21 15:00 2021-03-21 Show GitHub Exploit DB Packet Storm
194853 9.8 CRITICAL
Network
kramdown_project
fedoraproject
debian
kramdown
fedora
debian_linux
Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated. NVD-CWE-noinfo
CVE-2021-28834 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm
194854 7.5 HIGH
Network
busybox
fedoraproject
debian
busybox
fedora
debian_linux
decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. CWE-755
 Improper Handling of Exceptional Conditions
CVE-2021-28831 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm
194855 6.5 MEDIUM
Network
westerndigital armorlock The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave suppo… CWE-922
 Insecure Storage of Sensitive Information
CVE-2021-28653 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm
194856 6.1 MEDIUM
Network
increments qiita\ Increments Qiita::Markdown before 0.33.0 allows XSS in transformers. CWE-79
Cross-site Scripting
CVE-2021-28796 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm
194857 9.8 CRITICAL
Network
shellcheck_project shellcheck The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath. NVD-CWE-noinfo
CVE-2021-28794 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm
194858 7.8 HIGH
Local
swiftformat_project swiftformat The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path config… CWE-863
 Incorrect Authorization
CVE-2021-28791 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm
194859 7.8 HIGH
Local
swiftlint_project swiftlint The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configurat… NVD-CWE-noinfo
CVE-2021-28790 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm
194860 7.8 HIGH
Local
swift_development_environment_project swift_development_environment The unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted sour… NVD-CWE-noinfo
CVE-2021-28792 2024-11-21 15:00 2021-03-19 Show GitHub Exploit DB Packet Storm