Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258361 5.8 警告 Opera Software ASA - Windows 上で稼働する Opera におけるアドレスフィールドを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3832 2010-09-27 16:16 2009-10-28 Show GitHub Exploit DB Packet Storm
258362 5 警告 Opera Software ASA - Opera におけるフィッシング攻撃の脆弱性 CWE-Other
その他 		CVE-2009-3049 2010-09-27 16:15 2009-09-1 Show GitHub Exploit DB Packet Storm
258363 4.3 警告 Opera Software ASA - Opera における意図しないファイルをアップロードさせられる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3048 2010-09-27 16:15 2009-09-1 Show GitHub Exploit DB Packet Storm
258364 4.3 警告 Opera Software ASA - Opera における URL を偽装される脆弱性 CWE-Other
その他 		CVE-2009-3047 2010-09-27 16:15 2009-09-1 Show GitHub Exploit DB Packet Storm
258365 5 警告 Opera Software ASA - Opera における証明書チェーンの有効性を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3046 2010-09-27 16:15 2009-09-1 Show GitHub Exploit DB Packet Storm
258366 5 警告 Opera Software ASA - Opera における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-3045 2010-09-27 16:15 2009-09-1 Show GitHub Exploit DB Packet Storm
258367 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3831 2010-09-27 16:14 2009-10-28 Show GitHub Exploit DB Packet Storm
258368 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3269 2010-09-27 16:14 2009-09-18 Show GitHub Exploit DB Packet Storm
258369 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3266 2010-09-27 16:14 2009-09-18 Show GitHub Exploit DB Packet Storm
258370 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3265 2010-09-27 16:14 2009-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194751 8.8 HIGH
Network 		ibm websphere_application_server IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 2020… NVD-CWE-noinfo
CVE-2021-29754 2024-11-21 15:01 2021-06-12 Show GitHub Exploit DB Packet Storm
194752 7.4 HIGH
Network 		wp-cli wp-cli WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communicat… - CVE-2021-29504 2024-11-21 15:01 2021-06-8 Show GitHub Exploit DB Packet Storm
194753 7.5 HIGH
Network 		bubble_fireworks_project bubble_fireworks bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly ver… - CVE-2021-29500 2024-11-21 15:01 2021-06-5 Show GitHub Exploit DB Packet Storm
194754 5.4 MEDIUM
Network 		ibm rational_doors_next_generation
rational_quality_manager
collaborative_lifecycle_management
engineering_test_management
rational_engineering_lifecycle_manager
engineering_lifecycle_mana… 		IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu… CWE-79
Cross-site Scripting 		CVE-2021-29670 2024-11-21 15:01 2021-06-3 Show GitHub Exploit DB Packet Storm
194755 5.4 MEDIUM
Network 		ibm rational_doors_next_generation
rational_quality_manager
collaborative_lifecycle_management
engineering_test_management
rational_engineering_lifecycle_manager
engineering_lifecycle_mana… 		IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu… CWE-79
Cross-site Scripting 		CVE-2021-29668 2024-11-21 15:01 2021-06-3 Show GitHub Exploit DB Packet Storm
194756 7.8 HIGH
Local 		ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context… CWE-134
Use of Externally-Controlled Format String 		CVE-2021-29740 2024-11-21 15:01 2021-06-1 Show GitHub Exploit DB Packet Storm
194757 7.8 HIGH
Local 		ibm security_verify_access IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with ele… CWE-787
 Out-of-bounds Write 		CVE-2021-29665 2024-11-21 15:01 2021-06-1 Show GitHub Exploit DB Packet Storm
194758 6.5 MEDIUM
Network 		genivi diagnostic_log_and_trace GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vul… NVD-CWE-noinfo
CVE-2021-29507 2024-11-21 15:01 2021-05-29 Show GitHub Exploit DB Packet Storm
194759 8.8 HIGH
Network 		xstream_project
debian
fedoraproject
netapp
oracle 		xstream
debian_linux
fedora
snapmanager
webcenter_portal
webcenter_sites
communications_unified_inventory_management
enterprise_manager_ops_center
banking_credit_facilities_pr… 		XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of th… - CVE-2021-29505 2024-11-21 15:01 2021-05-29 Show GitHub Exploit DB Packet Storm
194760 8.3 HIGH
Network 		envoyproxy envoy Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path wi… - CVE-2021-29492 2024-11-21 15:01 2021-05-29 Show GitHub Exploit DB Packet Storm