Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257461	6.8	警告	アップル	-	Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0505	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

257462	7.5	危険	アップル	-	Apple Mac OS X の iChat サーバにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0504	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

257463	6.5	警告	アップル	-	Apple Mac OS X の iChat サーバにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0503	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

257464	4.3	警告	アップル	-	Apple Mac OS X の iChat サーバにおけるメッセージの監査を回避可能な脆弱性	CWE-DesignError	CVE-2010-0502	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

257465	5	警告	アップルレッドハット jabberd 2.x project	-	Jabber Studio jabberd の SASL ネゴシエーションにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-1329	2010-04-14 17:10	2006-03-21	Show	GitHub Exploit DB Packet Storm

257466	7.2	危険	アップル	-	Apple Mac OS X の FTP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0501	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

257467	7.5	危険	アップル	-	Apple Mac OS X の FreeRADIUS サーバにおけるネットワーク接続を確立される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0524	2010-04-14 17:10	2010-03-29	Show	GitHub Exploit DB Packet Storm

257468	7.8	危険	アップル	-	Apple Mac OS X の Event Monitor におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0500	2010-04-14 17:09	2010-03-29	Show	GitHub Exploit DB Packet Storm

257469	6.5	警告	アップル	-	Apple Mac OS X の Dovecot におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0535	2010-04-14 17:09	2010-03-29	Show	GitHub Exploit DB Packet Storm

257470	7.2	危険	アップル	-	Apple Mac OS X のディレクトリサービスにおける権限を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-0498	2010-04-14 17:09	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196591	7.5	HIGH Network	f5	big-ip_application_security_manager big-ip_advanced_web_application_firewall nginx_app_protect	On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, when a cross-site request forgery (CSRF)-enabled poli…	NVD-CWE-noinfo	CVE-2021-23050	2024-11-21 14:51	2021-09-14	Show	GitHub Exploit DB Packet Storm

196592	7.5	HIGH Network	f5	big-ip_access_policy_manager big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_accelerat…	On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an increase in Traffic Manag…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-23049	2024-11-21 14:51	2021-09-14	Show	GitHub Exploit DB Packet Storm

196593	7.5	HIGH Network	f5	big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system …	On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol (GTP) iRules comm…	NVD-CWE-noinfo	CVE-2021-23048	2024-11-21 14:51	2021-09-14	Show	GitHub Exploit DB Packet Storm

196594	6.1	MEDIUM Network	thoughtbot	clearance	This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If the value used for return_to contains multiple leadi…	CWE-601 Open Redirect	CVE-2021-23435	2024-11-21 14:51	2021-09-13	Show	GitHub Exploit DB Packet Storm

196595	9.8	CRITICAL Network	set-value_project oracle	set-value communications_cloud_native_core_policy	This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arra…	CWE-843 Type Confusion	CVE-2021-23440	2024-11-21 14:51	2021-09-12	Show	GitHub Exploit DB Packet Storm

196596	8.8	HIGH Network	sqlite-web_project	sqlite-web	This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable…	CWE-352 Origin Validation Error	CVE-2021-23404	2024-11-21 14:51	2021-09-8	Show	GitHub Exploit DB Packet Storm

196597	6.1	MEDIUM Network	johndatserakis	file-upload-with-preview	This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).	CWE-79 Cross-site Scripting	CVE-2021-23439	2024-11-21 14:51	2021-09-5	Show	GitHub Exploit DB Packet Storm

196598	7.5	HIGH Network	python fedoraproject	pillow fedora	The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.	CWE-125 Out-of-bounds Read	CVE-2021-23437	2024-11-21 14:51	2021-09-4	Show	GitHub Exploit DB Packet Storm

196599	9.8	CRITICAL Network	mpath_project	mpath	This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i]) !== -1 returns -1 i…	CWE-843 Type Confusion	CVE-2021-23438	2024-11-21 14:51	2021-09-2	Show	GitHub Exploit DB Packet Storm

196600	9.8	CRITICAL Network	immer_project	immer	This affects the package immer before 9.0.6. A type confusion vulnerability can lead to a bypass of CVE-2020-28477 when the user-provided keys used in the path parameter are arrays. In particular, th…	CWE-843 Type Confusion	CVE-2021-23436	2024-11-21 14:51	2021-09-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed