Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257911 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2997 2011-01-7 15:33 2010-12-10 Show GitHub Exploit DB Packet Storm
257912 2.6 注意 アップル
サイバートラスト株式会社
レッドハット
SquirrelMail Project		 - SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2964 2011-01-7 11:03 2009-08-12 Show GitHub Exploit DB Packet Storm
257913 4.3 警告 レッドハット
SquirrelMail Project		 - SquirrelMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1262 2011-01-7 11:02 2007-05-9 Show GitHub Exploit DB Packet Storm
257914 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer のマルチレートオーディオにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4375 2011-01-6 16:23 2010-12-10 Show GitHub Exploit DB Packet Storm
257915 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer の RealMedia メディアプロパティーヘッダーにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4384 2011-01-6 16:18 2010-12-10 Show GitHub Exploit DB Packet Storm
257916 4.3 警告 Mozilla Foundation
オラクル		 - 複数の Mozilla 製品の nsAuthSSPI::Unwrap 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0161 2011-01-6 16:01 2010-03-16 Show GitHub Exploit DB Packet Storm
257917 9.3 危険 Exim Development
レッドハット		 - Exim の string_format 関数にバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4344 2011-01-6 15:58 2010-12-14 Show GitHub Exploit DB Packet Storm
257918 4.3 警告 Mozilla Foundation
レッドハット		 - Mozilla Firefox および SeaMonkey のレンダリングエンジンにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3770 2011-01-6 15:50 2010-12-9 Show GitHub Exploit DB Packet Storm
257919 4.3 警告 Mozilla Foundation
レッドハット		 - Mozilla Firefox および SeaMonkey におけるロケーションバーを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3774 2011-01-6 15:17 2010-12-9 Show GitHub Exploit DB Packet Storm
257920 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox および SeaMonkey における任意の JavaScript を実行される脆弱性 CWE-DesignError
CVE-2010-3773 2011-01-6 15:15 2010-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200441 8.8 HIGH
Network 		\@thi.ng\/egf_project \@thi.ng\/egf Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true` option is enabled). PR with patch has been submitted and will has been release… - CVE-2021-21412 2024-11-21 14:48 2021-03-31 Show GitHub Exploit DB Packet Storm
200442 5.4 MEDIUM
Network 		prestashop prestashop PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fi… - CVE-2021-21398 2024-11-21 14:48 2021-03-31 Show GitHub Exploit DB Packet Storm
200443 8.8 HIGH
Network 		jenkins team_foundation_server A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified creden… CWE-352
 Origin Validation Error 		CVE-2021-21638 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200444 6.5 MEDIUM
Network 		jenkins team_foundation_server A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified … CWE-862
 Missing Authorization 		CVE-2021-21637 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200445 4.3 MEDIUM
Network 		jenkins team_foundation_server A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins. CWE-862
 Missing Authorization 		CVE-2021-21636 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200446 5.9 MEDIUM
Network 		netty
debian
netapp
oracle
quarkus 		netty
debian_linux
oncommand_workflow_automation
oncommand_api_services
coherence
banking_trade_finance_process_management
banking_credit_facilities_process_management
banking_co… 		Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http… - CVE-2021-21409 2024-11-21 14:48 2021-03-31 Show GitHub Exploit DB Packet Storm
200447 5.4 MEDIUM
Network 		jenkins rest_list_parameter Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by a… CWE-79
Cross-site Scripting 		CVE-2021-21635 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200448 6.5 MEDIUM
Network 		jenkins jabber_\(xmpp\)_notifier_and_control Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with acces… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-21634 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200449 8.8 HIGH
Network 		jenkins owasp_dependency-track A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in … CWE-352
 Origin Validation Error 		CVE-2021-21633 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200450 6.5 MEDIUM
Network 		jenkins owasp_dependency-track A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stor… CWE-862
 Missing Authorization 		CVE-2021-21632 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm