Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 4:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253221 8.5 危険 Cobbler project - Red Hat Network Satellite Server の Cobbler における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2235 2012-03-27 18:42 2010-10-18 Show GitHub Exploit DB Packet Storm
253222 3.5 注意 OTRS プロジェクト - OTRS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2080 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
253223 5 警告 Apache Software Foundation - Apache MyFaces の shared/util/StateUtils.java における View State を変更される脆弱性 CWE-310
暗号の問題 		CVE-2010-2057 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
253224 9.3 危険 シマンテック - SAVCE などの製品で使用されている AMS または AMS2 の HDNLRSVC.EXE における任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0111 2012-03-27 18:42 2011-01-26 Show GitHub Exploit DB Packet Storm
253225 7.9 危険 シマンテック - SAVCE などの製品で使用されている Intel Alert Management System におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0110 2012-03-27 18:42 2011-01-26 Show GitHub Exploit DB Packet Storm
253226 5 警告 Pentaho Corporation - Pentaho BI Server における Web トラフィックを傍受される脆弱性 CWE-200
情報漏えい 		CVE-2009-5101 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
253227 2.1 注意 Pentaho Corporation - Pentaho BI Server におけるパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-5100 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
253228 4.3 警告 Pentaho Corporation - Pentaho BI Server の ViewAction におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-5099 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
253229 5.4 警告 ヒューレット・パッカード - Palm Pre WebOS の LunaSysMgr プロセス におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5098 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
253230 6.3 警告 OpenFabrics Alliance - OFED の openibd における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-1693 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194771 7.8 HIGH
Local 		broadcom ehealth CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPAT… CWE-426
 Untrusted Search Path 		CVE-2021-28246 2024-11-21 14:59 2021-03-26 Show GitHub Exploit DB Packet Storm
194772 7.5 HIGH
Network 		contiki-os contiki An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL exte… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2021-28362 2024-11-21 14:59 2021-03-24 Show GitHub Exploit DB Packet Storm
194773 5.5 MEDIUM
Local 		netflix priam Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process. NVD-CWE-noinfo
CVE-2021-28100 2024-11-21 14:59 2021-03-24 Show GitHub Exploit DB Packet Storm
194774 4.4 MEDIUM
Local 		netflix hollow In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure sourc… CWE-330
 Use of Insufficiently Random Values 		CVE-2021-28099 2024-11-21 14:59 2021-03-24 Show GitHub Exploit DB Packet Storm
194775 7.5 HIGH
Network 		grafana grafana One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticate… CWE-306
Missing Authentication for Critical Function 		CVE-2021-28148 2024-11-21 14:59 2021-03-23 Show GitHub Exploit DB Packet Storm
194776 6.5 MEDIUM
Network 		grafana grafana The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication s… NVD-CWE-Other
CVE-2021-28147 2024-11-21 14:59 2021-03-23 Show GitHub Exploit DB Packet Storm
194777 6.5 MEDIUM
Network 		grafana grafana The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any aut… CWE-863
 Incorrect Authorization 		CVE-2021-28146 2024-11-21 14:59 2021-03-22 Show GitHub Exploit DB Packet Storm
194778 7.5 HIGH
Network 		kde discover libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of… NVD-CWE-noinfo
CVE-2021-28117 2024-11-21 14:59 2021-03-21 Show GitHub Exploit DB Packet Storm
194779 5.3 MEDIUM
Network 		torproject
fedoraproject 		tor
fedora 		Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an assertion failure, aka TROVE-2021-002. CWE-617
 Reachable Assertion 		CVE-2021-28090 2024-11-21 14:59 2021-03-19 Show GitHub Exploit DB Packet Storm
194780 7.5 HIGH
Network 		torproject
fedoraproject 		tor
fedora 		Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001. CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-28089 2024-11-21 14:59 2021-03-19 Show GitHub Exploit DB Packet Storm