Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258321 6.2 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo の secure path 機能における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1646 2010-09-8 15:50 2010-06-7 Show GitHub Exploit DB Packet Storm
258322 6.9 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1163 2010-09-8 15:50 2010-04-16 Show GitHub Exploit DB Packet Storm
258323 10 危険 ESET
アップル
ClamAV
ソースネクスト		 - 複数のアンチウィルス製品に脆弱性 CWE-noinfo
情報不足 		CVE-2010-0098 2010-09-8 15:50 2010-04-13 Show GitHub Exploit DB Packet Storm
258324 7.5 危険 The PHP Group
アップル		 - PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1129 2010-09-8 15:49 2010-03-26 Show GitHub Exploit DB Packet Storm
258325 4.4 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0427 2010-09-8 15:49 2010-02-25 Show GitHub Exploit DB Packet Storm
258326 6.6 警告 サイバートラスト株式会社
レッドハット		 - QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2784 2010-09-7 15:51 2010-08-19 Show GitHub Exploit DB Packet Storm
258327 6.6 警告 サイバートラスト株式会社
レッドハット		 - QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0431 2010-09-7 15:50 2010-08-19 Show GitHub Exploit DB Packet Storm
258328 6.6 警告 サイバートラスト株式会社
レッドハット		 - 複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0429 2010-09-7 15:49 2010-08-19 Show GitHub Exploit DB Packet Storm
258329 6.6 警告 サイバートラスト株式会社
レッドハット		 - 複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0428 2010-09-7 15:48 2010-08-19 Show GitHub Exploit DB Packet Storm
258330 - - ワイズテクノロジー - Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性 - - 2010-09-7 15:47 2010-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199931 9.8 CRITICAL
Network 		apkleaks_project apkleaks APKLeaks is an open-source project for scanning APK file for URIs, endpoints & secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside appli… - CVE-2021-21386 2024-11-21 14:48 2021-03-25 Show GitHub Exploit DB Packet Storm
199932 7.4 HIGH
Network 		mifos mifos-mobile Mifos-Mobile Android Application for MifosX is an Android Application built on top of the MifosX Self-Service platform. Mifos-Mobile before commit e505f62 disables HTTPS hostname verification of its … - CVE-2021-21385 2024-11-21 14:48 2021-03-25 Show GitHub Exploit DB Packet Storm
199933 8.8 HIGH
Network 		xwiki xwiki XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform (and only those with the Ratings API installed), the Ra… CWE-89
SQL Injection 		CVE-2021-21380 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
199934 6.5 MEDIUM
Network 		jellyfin jellyfin Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This is… - CVE-2021-21402 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
199935 7.1 HIGH
Network 		nanopb_project nanopb Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` ca… - CVE-2021-21401 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
199936 5.4 MEDIUM
Network 		openmicroscopy omero.web OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a given URL after performing login or switching the group contex… - CVE-2021-21377 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
199937 6.5 MEDIUM
Network 		openmicroscopy omero.web OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups t… - CVE-2021-21376 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
199938 5.4 MEDIUM
Network 		typo3 typo3 TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that content elements of type _menu_ are vulne… - CVE-2021-21370 2024-11-21 14:48 2021-03-23 Show GitHub Exploit DB Packet Storm
199939 7.5 HIGH
Network 		typo3 typo3 TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler… - CVE-2021-21359 2024-11-21 14:48 2021-03-23 Show GitHub Exploit DB Packet Storm
199940 5.4 MEDIUM
Network 		typo3 typo3 TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnera… - CVE-2021-21358 2024-11-21 14:48 2021-03-23 Show GitHub Exploit DB Packet Storm