Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257911	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2997	2011-01-7 15:33	2010-12-10	Show	GitHub Exploit DB Packet Storm

257912	2.6	注意	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2964	2011-01-7 11:03	2009-08-12	Show	GitHub Exploit DB Packet Storm

257913	4.3	警告	レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-1262	2011-01-7 11:02	2007-05-9	Show	GitHub Exploit DB Packet Storm

257914	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer のマルチレートオーディオにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4375	2011-01-6 16:23	2010-12-10	Show	GitHub Exploit DB Packet Storm

257915	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer の RealMedia メディアプロパティーヘッダーにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4384	2011-01-6 16:18	2010-12-10	Show	GitHub Exploit DB Packet Storm

257916	4.3	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の nsAuthSSPI::Unwrap 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0161	2011-01-6 16:01	2010-03-16	Show	GitHub Exploit DB Packet Storm

257917	9.3	危険	Exim Development レッドハット	-	Exim の string_format 関数にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4344	2011-01-6 15:58	2010-12-14	Show	GitHub Exploit DB Packet Storm

257918	4.3	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey のレンダリングエンジンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3770	2011-01-6 15:50	2010-12-9	Show	GitHub Exploit DB Packet Storm

257919	4.3	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey におけるロケーションバーを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3774	2011-01-6 15:17	2010-12-9	Show	GitHub Exploit DB Packet Storm

257920	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-DesignError	CVE-2010-3773	2011-01-6 15:15	2010-12-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200401	6.5	MEDIUM Network	jenkins	config_file_provider	Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate syst…	-	CVE-2021-21643	2024-11-21 14:48	2021-04-22	Show	GitHub Exploit DB Packet Storm

200402	8.1	HIGH Network	jenkins	config_file_provider	Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.	CWE-611 XXE	CVE-2021-21642	2024-11-21 14:48	2021-04-22	Show	GitHub Exploit DB Packet Storm

200403	6.7	MEDIUM Local	dell	powerscale_onefs	Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root.	CWE-78 OS Command	CVE-2021-21526	2024-11-21 14:48	2021-04-21	Show	GitHub Exploit DB Packet Storm

200404	7.5	HIGH Network	filecoin	lotus	Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library method VerifyCompressed. This method accepts signatures in 2 forms: "serialized"…	-	CVE-2021-21405	2024-11-21 14:48	2021-04-16	Show	GitHub Exploit DB Packet Storm

200405	7.5	HIGH Network	ampache	ampache	Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you …	CWE-287 Improper Authentication	CVE-2021-21399	2024-11-21 14:48	2021-04-14	Show	GitHub Exploit DB Packet Storm

200406	7.8	HIGH Local	accusoft	imagegear	An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provi…	CWE-787 Out-of-bounds Write	CVE-2021-21784	2024-11-21 14:48	2021-04-14	Show	GitHub Exploit DB Packet Storm

200407	4.3	MEDIUM Network	sap	netweaver_application_server_java	SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerabi…	CWE-290 Authentication Bypass by Spoofing	CVE-2021-21492	2024-11-21 14:48	2021-04-14	Show	GitHub Exploit DB Packet Storm

200408	6.5	MEDIUM Network	sap	netweaver_application_server_java	An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged u…	NVD-CWE-noinfo	CVE-2021-21485	2024-11-21 14:48	2021-04-14	Show	GitHub Exploit DB Packet Storm

200409	4.9	MEDIUM Network	sap	solution_manager	Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensitive information which has a direct serious impact beyond the exploitable compone…	NVD-CWE-noinfo	CVE-2021-21483	2024-11-21 14:48	2021-04-14	Show	GitHub Exploit DB Packet Storm

200410	8.3	HIGH Adjacent	sap	netweaver_master_data_management	SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If successful…	NVD-CWE-noinfo	CVE-2021-21482	2024-11-21 14:48	2021-04-14	Show	GitHub Exploit DB Packet Storm