Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253791	7.8	危険	シスコシステムズ	-	Cisco WLC におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0574	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

253792	3.5	注意	IBM	-	IBM PNMSS の load.php における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0155	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

253793	4	警告	IBM	-	IBM PNMSS アプライアンスの sla/index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0154	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

253794	6.8	警告	IBM	-	IBM PNMSS アプライアンスの LMI におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0153	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

253795	4.3	警告	IBM	-	IBM PNMSS アプライアンスの LMI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0152	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

253796	7.5	危険	シマンテック	-	Symantec SEP の fw_charts.php におけるレポート生成の制限を回避する脆弱性	CWE-20 不適切な入力確認	CVE-2010-0114	2012-03-27 18:42	2010-12-15	Show	GitHub Exploit DB Packet Storm

253797	7.5	危険	シマンテック	-	Symantec IM Manager の管理者インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0112	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

253798	5	警告	mhonarc	-	MHonArc におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1677	2012-03-27 18:42	2011-01-3	Show	GitHub Exploit DB Packet Storm

253799	5.5	警告	レッドハット	-	RHN Satellite におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1171	2012-03-27 18:42	2011-04-11	Show	GitHub Exploit DB Packet Storm

253800	5.8	警告	zeacom	-	Zeacom Chat Server におけるセッションをハイジャックされるの脆弱性	CWE-310 暗号の問題	CVE-2010-0217	2012-03-27 18:42	2011-05-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194751	8.8	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 2020…	NVD-CWE-noinfo	CVE-2021-29754	2024-11-21 15:01	2021-06-12	Show	GitHub Exploit DB Packet Storm

194752	7.4	HIGH Network	wp-cli	wp-cli	WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communicat…	-	CVE-2021-29504	2024-11-21 15:01	2021-06-8	Show	GitHub Exploit DB Packet Storm

194753	7.5	HIGH Network	bubble_fireworks_project	bubble_fireworks	bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly ver…	-	CVE-2021-29500	2024-11-21 15:01	2021-06-5	Show	GitHub Exploit DB Packet Storm

194754	5.4	MEDIUM Network	ibm	rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…	CWE-79 Cross-site Scripting	CVE-2021-29670	2024-11-21 15:01	2021-06-3	Show	GitHub Exploit DB Packet Storm

194755	5.4	MEDIUM Network	ibm	rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana…	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu…	CWE-79 Cross-site Scripting	CVE-2021-29668	2024-11-21 15:01	2021-06-3	Show	GitHub Exploit DB Packet Storm

194756	7.8	HIGH Local	ibm	spectrum_scale	IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context…	CWE-134 Use of Externally-Controlled Format String	CVE-2021-29740	2024-11-21 15:01	2021-06-1	Show	GitHub Exploit DB Packet Storm

194757	7.8	HIGH Local	ibm	security_verify_access	IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with ele…	CWE-787 Out-of-bounds Write	CVE-2021-29665	2024-11-21 15:01	2021-06-1	Show	GitHub Exploit DB Packet Storm

194758	6.5	MEDIUM Network	genivi	diagnostic_log_and_trace	GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vul…	NVD-CWE-noinfo	CVE-2021-29507	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

194759	8.8	HIGH Network	xstream_project debian fedoraproject netapp oracle	xstream debian_linux fedora snapmanager webcenter_portal webcenter_sites communications_unified_inventory_management enterprise_manager_ops_center banking_credit_facilities_pr…	XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of th…	-	CVE-2021-29505	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

194760	8.3	HIGH Network	envoyproxy	envoy	Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path wi…	-	CVE-2021-29492	2024-11-21 15:01	2021-05-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed