Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258221	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3077	2010-04-1 13:41	2009-09-9	Show	GitHub Exploit DB Packet Storm

258222	5	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox におけるドメイン名の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2470	2010-04-1 13:40	2009-07-21	Show	GitHub Exploit DB Packet Storm

258223	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2466	2010-04-1 13:38	2009-07-21	Show	GitHub Exploit DB Packet Storm

258224	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2463	2010-04-1 13:36	2009-07-21	Show	GitHub Exploit DB Packet Storm

258225	10	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-2462	2010-04-1 13:34	2009-07-21	Show	GitHub Exploit DB Packet Storm

258226	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の fasync_helper 関数における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4141	2010-03-29 15:18	2010-01-19	Show	GitHub Exploit DB Packet Storm

258227	9.3	危険	アップル	-	Apple Safari における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0045	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

258228	4.3	警告	アップル	-	Apple Safari の PubSub における Cookie が設定される脆弱性	CWE-16 環境設定	CVE-2010-0044	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

258229	7.5	危険	サン・マイクロシステムズ GNU Project サイバートラスト株式会社レッドハット	-	GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4476	2010-03-25 11:47	2007-08-17	Show	GitHub Exploit DB Packet Storm

258230	7.8	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3282	2010-03-24 12:23	2009-10-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197711	8.8	HIGH Network	librecad debian fedoraproject	libdxfrw debian_linux fedora	A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write.…	-	CVE-2021-21898	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

197712	8.8	HIGH Network	librecad debian fedoraproject	libdxfrw debian_linux fedora	A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability.…	-	CVE-2021-21900	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

197713	8.8	HIGH Network	librecad fedoraproject debian	libdxfrw fedora debian_linux	A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow…	-	CVE-2021-21899	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

197714	6.5	MEDIUM Network	greenplum	greenplum	In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with …	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2021-22030	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

197715	9.1	CRITICAL Network	greenplum	greenplum	In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user …	CWE-22 Path Traversal	CVE-2021-22028	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

197716	8.8	HIGH Network	vmware	spring_cloud_netflix	Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view t…	CWE-94 Code Injection	CVE-2021-22053	2024-11-21 14:49	2021-11-20	Show	GitHub Exploit DB Packet Storm

197717	8.8	HIGH Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter S…	NVD-CWE-noinfo	CVE-2021-22048	2024-11-21 14:49	2021-11-11	Show	GitHub Exploit DB Packet Storm

197718	6.5	MEDIUM Network	vmware	spring_cloud_gateway	Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following …	CWE-863 Incorrect Authorization	CVE-2021-22051	2024-11-21 14:49	2021-11-8	Show	GitHub Exploit DB Packet Storm

197719	5.4	MEDIUM Network	gitlab	gitlab	A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all version…	CWE-79 Cross-site Scripting	CVE-2021-22260	2024-11-21 14:49	2021-11-5	Show	GitHub Exploit DB Packet Storm

197720	8.8	HIGH Network	vmware	installbuilder	On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This…	CWE-330 Use of Insufficiently Random Values	CVE-2021-22038	2024-11-21 14:49	2021-10-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed