Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257081	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2463	2010-04-1 13:36	2009-07-21	Show	GitHub Exploit DB Packet Storm

257082	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2462	2010-04-1 13:34	2009-07-21	Show	GitHub Exploit DB Packet Storm

257083	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の fasync_helper 関数における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4141	2010-03-29 15:18	2010-01-19	Show	GitHub Exploit DB Packet Storm

257084	9.3	危険	アップル	-	Apple Safari における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0045	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

257085	4.3	警告	アップル	-	Apple Safari の PubSub における Cookie が設定される脆弱性	CWE-16 環境設定	CVE-2010-0044	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

257086	7.5	危険	サン・マイクロシステムズ GNU Project サイバートラスト株式会社レッドハット	-	GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4476	2010-03-25 11:47	2007-08-17	Show	GitHub Exploit DB Packet Storm

257087	7.8	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3282	2010-03-24 12:23	2009-10-1	Show	GitHub Exploit DB Packet Storm

257088	7.2	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3281	2010-03-24 12:22	2009-10-1	Show	GitHub Exploit DB Packet Storm

257089	9.3	危険	VMware	-	複数の VMware 製品の VMnc media コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2628	2010-03-24 12:22	2009-09-4	Show	GitHub Exploit DB Packet Storm

257090	9.3	危険	VMware	-	複数の VMware 製品の VMnc media コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0199	2010-03-24 12:22	2009-09-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194831	6.1	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile.	CWE-79 Cross-site Scripting	CVE-2021-23930	2024-11-21 14:52	2021-01-13	Show	GitHub Exploit DB Packet Storm

194832	6.1	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.	CWE-79 Cross-site Scripting	CVE-2021-23929	2024-11-21 14:52	2021-01-13	Show	GitHub Exploit DB Packet Storm

194833	6.1	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.	CWE-79 Cross-site Scripting	CVE-2021-23928	2024-11-21 14:52	2021-01-13	Show	GitHub Exploit DB Packet Storm

194834	6.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-23927	2024-11-21 14:52	2021-01-13	Show	GitHub Exploit DB Packet Storm

194835	9.1	CRITICAL Network	ivanti	avalanche	An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.	NVD-CWE-noinfo	CVE-2021-22962	2024-11-21 14:51	2023-12-20	Show	GitHub Exploit DB Packet Storm

194836	7.5	HIGH Network	odoo	odoo	Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via cr…	NVD-CWE-Other	CVE-2021-23203	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

194837	8.7	HIGH Network	odoo	odoo	A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents of other tenants, in a multi-tena…	NVD-CWE-noinfo	CVE-2021-23186	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

194838	7.5	HIGH Network	odoo	odoo	Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that belongs to another us…	NVD-CWE-noinfo	CVE-2021-23178	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

194839	6.5	MEDIUM Network	odoo	odoo	Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting infor…	NVD-CWE-noinfo	CVE-2021-23176	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

194840	8.7	HIGH Network	odoo	odoo	A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.	NVD-CWE-noinfo	CVE-2021-23166	2024-11-21 14:51	2023-04-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed