Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256271 6.4 警告 日立 - JP1/NETM/Remote Control Agent における認証を回避される脆弱性 CWE-287
不適切な認証
- 2010-09-16 15:42 2010-08-31 Show GitHub Exploit DB Packet Storm
256272 6.8 警告 ヒューレット・パッカード - HP HP-UX の Software Distributor における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-2712 2010-09-15 17:18 2010-08-25 Show GitHub Exploit DB Packet Storm
256273 6 警告 レッドハット - Red Hat Enterprise Linux の gdm におけるアクセス制限を回避される脆弱性 CWE-DesignError
CVE-2007-5079 2010-09-15 17:18 2007-09-25 Show GitHub Exploit DB Packet Storm
256274 9.3 危険 ImageMagick
GraphicsMagick
レッドハット
- ImageMagick および GraphicsMagick の XMakeImage 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-1882 2010-09-15 17:17 2009-06-2 Show GitHub Exploit DB Packet Storm
256275 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-2794 2010-09-15 17:17 2010-08-25 Show GitHub Exploit DB Packet Storm
256276 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性 CWE-362
競合状態
CVE-2010-2792 2010-09-15 17:13 2010-08-25 Show GitHub Exploit DB Packet Storm
256277 1.9 注意 シトリックス・システムズ - Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-2619 2010-09-14 15:55 2010-06-17 Show GitHub Exploit DB Packet Storm
256278 4.6 警告 シトリックス・システムズ - Citrix XenServer における認証を回避され Xen API (XAPI) を実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-0633 2010-09-14 15:54 2010-02-12 Show GitHub Exploit DB Packet Storm
256279 4.3 警告 シトリックス・システムズ - 複数の Citrix XenServer 製品の XenAPI HTTP インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3253 2010-09-14 15:54 2008-07-16 Show GitHub Exploit DB Packet Storm
256280 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-3760 2010-09-14 15:54 2009-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195071 9.8 CRITICAL
Network
tibco api_exchange_gateway_distribution
api_exchange_gateway
The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an u… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2021-23274 2024-11-21 14:51 2021-03-24 Show GitHub Exploit DB Packet Storm
195072 8.8 HIGH
Network
killport_project killport This affects the package killport before 1.0.2. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exe… CWE-78
OS Command 
CVE-2021-23360 2024-11-21 14:51 2021-03-22 Show GitHub Exploit DB Packet Storm
195073 8.8 HIGH
Network
port-killer_project port-killer This affects all versions of package port-killer. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process e… CWE-78
OS Command 
CVE-2021-23359 2024-11-21 14:51 2021-03-18 Show GitHub Exploit DB Packet Storm
195074 6.7 MEDIUM
Local
mcafee endpoint_product_removal_tool Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from… CWE-428
 Unquoted Search Path or Element
CVE-2021-23879 2024-11-21 14:51 2021-03-16 Show GitHub Exploit DB Packet Storm
195075 5.3 MEDIUM
Local
tyk tyk All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the… CWE-22
Path Traversal
CVE-2021-23357 2024-11-21 14:51 2021-03-16 Show GitHub Exploit DB Packet Storm
195076 9.8 CRITICAL
Network
kill-process-by-name_project kill-process-by-name This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_… CWE-78
OS Command 
CVE-2021-23356 2024-11-21 14:51 2021-03-16 Show GitHub Exploit DB Packet Storm
195077 9.8 CRITICAL
Network
ps-kill_project ps-kill This affects all versions of package ps-kill. If (attacker-controlled) user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of th… CWE-78
OS Command 
CVE-2021-23355 2024-11-21 14:51 2021-03-16 Show GitHub Exploit DB Packet Storm
195078 7.5 HIGH
Network
adaltas printf The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscde… CWE-1333
 Inefficient Regular Expression Complexity
CVE-2021-23354 2024-11-21 14:51 2021-03-13 Show GitHub Exploit DB Packet Storm
195079 5.4 MEDIUM
Network
tibco spotfire_server
spotfire_desktop
spotfire_analyst
analytics_platform
The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vuln… CWE-79
Cross-site Scripting
CVE-2021-23273 2024-11-21 14:51 2021-03-10 Show GitHub Exploit DB Packet Storm
195080 7.5 HIGH
Network
parall jspdf This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function. NVD-CWE-noinfo
CVE-2021-23353 2024-11-21 14:51 2021-03-10 Show GitHub Exploit DB Packet Storm