Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256171	3.2	注意	オラクル	-	Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2384	2010-08-4 16:26	2010-07-13	Show	GitHub Exploit DB Packet Storm

256172	3.2	注意	オラクル	-	Oracle Solaris における NFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2383	2010-08-4 16:25	2010-07-13	Show	GitHub Exploit DB Packet Storm

256173	3.2	注意	オラクル	-	Oracle Solaris における脆弱性	CWE-noinfo 情報不足	CVE-2010-2382	2010-08-4 16:25	2010-07-13	Show	GitHub Exploit DB Packet Storm

256174	3.2	注意	オラクル	-	Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2376	2010-08-4 16:25	2010-07-13	Show	GitHub Exploit DB Packet Storm

256175	3.8	注意	オラクル	-	Oracle Solaris における RPCの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2393	2010-08-4 16:25	2010-07-13	Show	GitHub Exploit DB Packet Storm

256176	4.6	警告	オラクル	-	Oracle Solaris における Kernel/Filesystem の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2400	2010-08-4 16:24	2010-07-13	Show	GitHub Exploit DB Packet Storm

256177	4.6	警告	オラクル	-	Oracle Solaris における Kernel/VM の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2399	2010-08-4 16:24	2010-07-13	Show	GitHub Exploit DB Packet Storm

256178	10	危険	日立	-	JP1/Cm2/Network Node Manager における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	-	2010-08-4 16:23	2010-07-12	Show	GitHub Exploit DB Packet Storm

256179	5	警告	日立	-	HiRDB におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-08-4 16:23	2010-06-30	Show	GitHub Exploit DB Packet Storm

256180	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0177	2010-08-4 15:25	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195351	4.4	MEDIUM Local	dell	latitude_5285_2-in-1_firmware latitude_5289_2-in-1_firmware latitude_5310_2-in-1_firmware latitude_5290_2-in-1_firmware latitude_7210_2-in-1_firmware latitude_7212_rugged_extreme_table…	Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resett…	NVD-CWE-noinfo	CVE-2021-21522	2024-11-21 14:48	2021-09-29	Show	GitHub Exploit DB Packet Storm

195352	5.5	MEDIUM Local	zte	axon_30_pro_message_service	There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter settings, attackers could use this vulnerability to obtain some sensitive inform…	NVD-CWE-Other	CVE-2021-21742	2024-11-21 14:48	2021-09-25	Show	GitHub Exploit DB Packet Storm

195353	7.8	HIGH Local	gonitro	nitro_pro	An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a stack variable to go out of scope, res…	NVD-CWE-Other	CVE-2021-21798	2024-11-21 14:48	2021-09-15	Show	GitHub Exploit DB Packet Storm

195354	4.8	MEDIUM Network	sap	netweaver_enterprise_portal	SAP NetWeaver Enterprise Portal versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user related data, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This…	CWE-79 Cross-site Scripting	CVE-2021-21489	2024-11-21 14:48	2021-09-14	Show	GitHub Exploit DB Packet Storm

195355	5.5	MEDIUM Local	jenkins	nomad	Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the Jenkins controller where they can be viewed by users with access to the Jenkins control…	CWE-522 Insufficiently Protected Credentials	CVE-2021-21681	2024-11-21 14:48	2021-08-31	Show	GitHub Exploit DB Packet Storm

195356	7.1	HIGH Network	jenkins	nested_view	Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.	CWE-611 XXE	CVE-2021-21680	2024-11-21 14:48	2021-08-31	Show	GitHub Exploit DB Packet Storm

195357	8.8	HIGH Network	jenkins	azure_ad	Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.	CWE-352 Origin Validation Error	CVE-2021-21679	2024-11-21 14:48	2021-08-31	Show	GitHub Exploit DB Packet Storm

195358	8.8	HIGH Network	jenkins	saml	Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.	CWE-352 Origin Validation Error	CVE-2021-21678	2024-11-21 14:48	2021-08-31	Show	GitHub Exploit DB Packet Storm

195359	8.8	HIGH Network	jenkins	code_coverage_api	Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerabil…	CWE-502 Deserialization of Untrusted Data	CVE-2021-21677	2024-11-21 14:48	2021-08-31	Show	GitHub Exploit DB Packet Storm

195360	9.8	CRITICAL Network	zte	zxv10_m910_firmware	There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands …	CWE-502 Deserialization of Untrusted Data	CVE-2021-21741	2024-11-21 14:48	2021-08-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed