Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257231	5	警告	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の Java Runtime Environment (JRE) におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3728	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

257232	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0248	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

257233	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0244	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

257234	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0027	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

257235	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0247	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

257236	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0246	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

257237	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0245	2010-02-22 12:13	2010-01-21	Show	GitHub Exploit DB Packet Storm

257238	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性	CWE-DesignError	CVE-2009-4074	2010-02-22 12:13	2009-11-25	Show	GitHub Exploit DB Packet Storm

257239	6.6	警告	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0232	2010-02-22 12:12	2010-01-20	Show	GitHub Exploit DB Packet Storm

257240	10	危険	Rockwell Automation	-	Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性	CWE-noinfo 情報不足	CVE-2009-3739	2010-02-19 14:22	2010-01-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195891	6.5	MEDIUM Network	greenplum	greenplum	In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with …	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2021-22030	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

195892	9.1	CRITICAL Network	greenplum	greenplum	In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user …	CWE-22 Path Traversal	CVE-2021-22028	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

195893	8.8	HIGH Network	vmware	spring_cloud_netflix	Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view t…	CWE-94 Code Injection	CVE-2021-22053	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

195894	8.8	HIGH Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter S…	NVD-CWE-noinfo	CVE-2021-22048	2024-11-21 14:49	2021-11-11	Show	GitHub Exploit DB Packet Storm

195895	6.5	MEDIUM Network	vmware	spring_cloud_gateway	Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following …	CWE-863 Incorrect Authorization	CVE-2021-22051	2024-11-21 14:49	2021-11-8	Show	GitHub Exploit DB Packet Storm

195896	5.4	MEDIUM Network	gitlab	gitlab	A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all version…	CWE-79 Cross-site Scripting	CVE-2021-22260	2024-11-21 14:49	2021-11-5	Show	GitHub Exploit DB Packet Storm

195897	8.8	HIGH Network	vmware	installbuilder	On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This…	CWE-330 Use of Insufficiently Random Values	CVE-2021-22038	2024-11-21 14:49	2021-10-29	Show	GitHub Exploit DB Packet Storm

195898	7.8	HIGH Local	vmware	installbuilder	Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the sea…	CWE-427 Uncontrolled Search Path Element	CVE-2021-22037	2024-11-21 14:49	2021-10-29	Show	GitHub Exploit DB Packet Storm

195899	6.5	MEDIUM Network	vmware	spring_advanced_message_queuing_protocol	In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body for a message with content type application/x-java-seriali…	CWE-502 Deserialization of Untrusted Data	CVE-2021-22097	2024-11-21 14:49	2021-10-29	Show	GitHub Exploit DB Packet Storm

195900	4.3	MEDIUM Network	vmware netapp oracle	spring_framework snap_creator_framework snapcenter active_iq_unified_manager management_services_for_element_software_and_netapp_hci metrocluster_tiebreaker communications_cloud_nat…	In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.	NVD-CWE-Other	CVE-2021-22096	2024-11-21 14:49	2021-10-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed