Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255761	5	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の spnego_gss_accept_sec_context 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0845	2010-12-7 16:38	2009-03-27	Show	GitHub Exploit DB Packet Storm

255762	5.8	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の SPNEGO 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0844	2010-12-7 16:38	2009-04-7	Show	GitHub Exploit DB Packet Storm

255763	4	警告	Pidgin レッドハット	-	Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3711	2010-12-7 15:44	2010-05-12	Show	GitHub Exploit DB Packet Storm

255764	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3336	2010-12-6 16:51	2010-11-9	Show	GitHub Exploit DB Packet Storm

255765	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2573	2010-12-6 16:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

255766	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3337	2010-12-6 15:44	2010-08-23	Show	GitHub Exploit DB Packet Storm

255767	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3335	2010-12-6 15:36	2010-11-9	Show	GitHub Exploit DB Packet Storm

255768	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3334	2010-12-6 15:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

255769	4.3	警告	Zope Foundation	-	Zope Object Database の ZEO/StorageServer.py におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-3495	2010-12-6 15:20	2010-10-19	Show	GitHub Exploit DB Packet Storm

255770	4.3	警告	マイクロソフト	-	複数の Microsoft 製品の toStaticHTML 関数および SafeHTML 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3324	2010-12-3 14:05	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195071	6.1	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.	CWE-79 Cross-site Scripting	CVE-2021-23929	2024-11-21 14:52	2021-01-13	Show	GitHub Exploit DB Packet Storm

195072	6.1	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.	CWE-79 Cross-site Scripting	CVE-2021-23928	2024-11-21 14:52	2021-01-13	Show	GitHub Exploit DB Packet Storm

195073	6.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-23927	2024-11-21 14:52	2021-01-13	Show	GitHub Exploit DB Packet Storm

195074	9.1	CRITICAL Network	ivanti	avalanche	An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.	NVD-CWE-noinfo	CVE-2021-22962	2024-11-21 14:51	2023-12-20	Show	GitHub Exploit DB Packet Storm

195075	7.5	HIGH Network	odoo	odoo	Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via cr…	NVD-CWE-Other	CVE-2021-23203	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

195076	8.7	HIGH Network	odoo	odoo	A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents of other tenants, in a multi-tena…	NVD-CWE-noinfo	CVE-2021-23186	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

195077	7.5	HIGH Network	odoo	odoo	Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that belongs to another us…	NVD-CWE-noinfo	CVE-2021-23178	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

195078	6.5	MEDIUM Network	odoo	odoo	Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting infor…	NVD-CWE-noinfo	CVE-2021-23176	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

195079	8.7	HIGH Network	odoo	odoo	A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.	NVD-CWE-noinfo	CVE-2021-23166	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

195080	5.5	MEDIUM Local	sox_project	sox	A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.	-	CVE-2021-23210	2024-11-21 14:51	2022-08-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed