Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255851	6.8	警告	w3m project ターボリナックスサイバートラスト株式会社レッドハット	-	w3m のistream.c における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2074	2010-09-27 16:24	2010-06-16	Show	GitHub Exploit DB Packet Storm

255852	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックス OpenLDAP Foundation	-	OpenLDAP における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3767	2010-09-27 16:23	2009-10-23	Show	GitHub Exploit DB Packet Storm

255853	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3021	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

255854	5	警告	Opera Software ASA	-	Opera の news-feed プレビュー機能における任意のフィードの購読を強制される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3020	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

255855	9.3	危険	Opera Software ASA	-	Opera におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3019	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

255856	9.3	危険	Opera Software ASA	-	Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2666	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

255857	4.3	警告	Opera Software ASA	-	Opera における URI の処理に関するクロスサイトスクリプティングの脆弱性\	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2665	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

255858	4.3	警告	Opera Software ASA	-	Opera の HTML コンテンツにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2664	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

255859	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2663	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

255860	4.3	警告	Opera Software ASA	-	Opera におけるポップアップブロッカーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2662	2010-09-27 16:20	2010-07-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195681	9.1	CRITICAL Network	sap	scimono	In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.	CWE-74 Injection	CVE-2021-21479	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195682	6.1	MEDIUM Network	sap	web_dynpro_abap	SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.	CWE-601 Open Redirect	CVE-2021-21478	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195683	9.9	CRITICAL Network	sap	commerce	SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticated attacker with this privilege will be able to inject mali…	CWE-94 Code Injection	CVE-2021-21477	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195684	6.1	MEDIUM Network	sap	ui5	SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerab…	CWE-601 Open Redirect	CVE-2021-21476	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195685	7.5	HIGH Network	sap	netweaver_master_data_management_server	Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to exploit insufficient validation of path information provided by users, thus charac…	CWE-22 Path Traversal	CVE-2021-21475	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195686	6.5	MEDIUM Network	sap	hana_database	SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tam…	CWE-326 Inadequate Encryption Strength	CVE-2021-21474	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195687	8.8	HIGH Network	sap	software_provisioning_manager	SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set password during its installation, this allows an authenticated attacker to perfo…	CWE-306 Missing Authentication for Critical Function	CVE-2021-21472	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195688	6.1	MEDIUM Network	sap	businessobjects_business_intelligence	SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This coul…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2021-21444	2024-11-21 14:48	2021-02-10	Show	GitHub Exploit DB Packet Storm

195689	4.3	MEDIUM Network	otrs	cis_in_customer_frontend	Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.	CWE-276 Incorrect Default Permissions	CVE-2021-21436	2024-11-21 14:48	2021-02-8	Show	GitHub Exploit DB Packet Storm

195690	6.5	MEDIUM Network	otrs	otrs	Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0…	CWE-200 Information Exposure	CVE-2021-21435	2024-11-21 14:48	2021-02-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed