Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258371 5.5 警告 オラクル - Oracle Database Server の OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2412 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
258372 6.5 警告 オラクル - Oracle Database Server の Java Virtual Machine コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2419 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
258373 7.5 危険 オラクル - 複数の Oracle 製品の Database Control コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2390 2010-10-29 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
258374 7.5 危険 マイクロソフト - Microsoft Windows Server の Microsoft Cluster Service 内にあるユーザインターフェイスにおけるディスク上のデータを読まれるまたは編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3223 2010-10-29 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
258375 9.3 危険 マイクロソフト - 複数の Microsoft 製品の UpdateFrameTitleForDocument メソッドにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3227 2010-10-29 16:31 2010-10-12 Show GitHub Exploit DB Packet Storm
258376 7.1 危険 マイクロソフト - 複数の Microsoft 製品の Secure Channel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3229 2010-10-29 16:30 2010-10-12 Show GitHub Exploit DB Packet Storm
258377 7.2 危険 マイクロソフト - 複数の Microsoft 製品の Remote Procedure Call Subsystem におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3222 2010-10-29 16:30 2010-10-12 Show GitHub Exploit DB Packet Storm
258378 9.3 危険 マイクロソフト - Microsoft Windows Media Player における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2745 2010-10-29 16:27 2010-10-12 Show GitHub Exploit DB Packet Storm
258379 4.3 警告 トランスウエア - Active! mail 6 における HTTP ヘッダインジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3913 2010-10-29 16:01 2010-10-29 Show GitHub Exploit DB Packet Storm
258380 6.8 警告 Schezo - Lhaplus における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3158 2010-10-28 16:55 2010-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195561 8.8 HIGH
Network 		hongdian h8922_firmware Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest… CWE-78
OS Command  		CVE-2021-28151 2024-11-21 14:59 2021-05-7 Show GitHub Exploit DB Packet Storm
195562 5.5 MEDIUM
Local 		hongdian h8922_firmware Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2021-28150 2024-11-21 14:59 2021-05-7 Show GitHub Exploit DB Packet Storm
195563 6.5 MEDIUM
Network 		hongdian h8922_firmware Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file… CWE-22
Path Traversal 		CVE-2021-28149 2024-11-21 14:59 2021-05-7 Show GitHub Exploit DB Packet Storm
195564 8.1 HIGH
Network 		strapi strapi In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a valid session can use this to take over an … CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2021-28128 2024-11-21 14:59 2021-05-6 Show GitHub Exploit DB Packet Storm
195565 6.1 MEDIUM
Network 		apache airflow The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and… CWE-79
Cross-site Scripting 		CVE-2021-28359 2024-11-21 14:59 2021-05-2 Show GitHub Exploit DB Packet Storm
195566 6.1 MEDIUM
Network 		php-fusion phpfusion CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-28280 2024-11-21 14:59 2021-04-30 Show GitHub Exploit DB Packet Storm
195567 8.8 HIGH
Network 		soyal 701client Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2021-28269 2024-11-21 14:59 2021-04-28 Show GitHub Exploit DB Packet Storm
195568 8.8 HIGH
Network 		soyal 701server
701clientsql
701serversql 		Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulne… CWE-276
Incorrect Default Permissions  		CVE-2021-28271 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
195569 6.1 MEDIUM
Network 		apache superset Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allo… CWE-601
Open Redirect 		CVE-2021-28125 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
195570 5.3 MEDIUM
Network 		orangehrm orangehrm OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function. NVD-CWE-noinfo
CVE-2021-28399 2024-11-21 14:59 2021-04-26 Show GitHub Exploit DB Packet Storm