Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258401	5	警告	S2 Security	-	S2 Netbox に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2466	2010-07-16 18:41	2010-06-28	Show	GitHub Exploit DB Packet Storm

258402	4.3	警告	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスの WebVPN における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-7257	2010-07-16 18:41	2010-06-29	Show	GitHub Exploit DB Packet Storm

258403	7.5	危険	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における link インジェクションの脆弱性	CWE-noinfo 情報不足	CVE-2010-2324	2010-07-16 18:40	2010-06-2	Show	GitHub Exploit DB Packet Storm

258404	5	警告	IBM	-	z/OS 上で稼働する IBM WebSphere Application Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2323	2010-07-16 18:40	2010-03-22	Show	GitHub Exploit DB Packet Storm

258405	10	危険	IBM	-	IBM Lotus Domino のサーバにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0358	2010-07-16 15:35	2010-01-20	Show	GitHub Exploit DB Packet Storm

258406	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1203	2010-07-15 21:46	2010-06-22	Show	GitHub Exploit DB Packet Storm

258407	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Windows 7 上で稼働する Mozilla Firefox における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1121	2010-07-15 17:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

258408	2.1	注意	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性	CWE-Other その他	CVE-2008-5913	2010-07-15 17:20	2009-01-20	Show	GitHub Exploit DB Packet Storm

258409	7.4	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 の rename_principal_2_svc() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2798	2010-07-15 17:20	2007-06-26	Show	GitHub Exploit DB Packet Storm

258410	7.9	危険	日本電気サイバートラスト株式会社 MIT Kerberos ヒューレット・パッカードターボリナックスレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性	-	CVE-2007-2443	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196581	7.5	HIGH Network	apache	ofbiz	In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon…	CWE-209 Information Exposure Through an Error Message	CVE-2021-25958	2024-11-21 14:55	2021-08-30	Show	GitHub Exploit DB Packet Storm

196582	9.8	CRITICAL Network	atlassian	confluence_server confluence_data_center	In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data…	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2021-26084	2024-11-21 14:55	2021-08-30	Show	GitHub Exploit DB Packet Storm

196583	9.1	CRITICAL Network	joomla	joomla\!	An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.	CWE-863 Incorrect Authorization	CVE-2021-26040	2024-11-21 14:55	2021-08-25	Show	GitHub Exploit DB Packet Storm

196584	8.8	HIGH Network	dolibarr	dolibarr	In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the password of any user in the application using…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2021-25957	2024-11-21 14:55	2021-08-18	Show	GitHub Exploit DB Packet Storm

196585	7.2	HIGH Network	dolibarr	dolibarr dolibarr_erp\/crm	In “Dolibarr” application, v3.3.beta1_20121221 to v13.0.2 have “Modify” access for admin level users to change other user’s details but fails to validate already existing “Login” name, while renaming…	NVD-CWE-Other	CVE-2021-25956	2024-11-21 14:55	2021-08-18	Show	GitHub Exploit DB Packet Storm

196586	5.3	MEDIUM Network	atlassian	jira_server jira_data_center	Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions a…	CWE-22 Path Traversal	CVE-2021-26086	2024-11-21 14:55	2021-08-16	Show	GitHub Exploit DB Packet Storm

196587	9.0	CRITICAL Network	dolibarr	dolibarr	In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the “Private Note…	CWE-79 Cross-site Scripting	CVE-2021-25955	2024-11-21 14:55	2021-08-16	Show	GitHub Exploit DB Packet Storm

196588	7.5	HIGH Network	siemens	automation_license_manager	A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2). Sending specially crafted packets to port 4410/tcp…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-25659	2024-11-21 14:55	2021-08-10	Show	GitHub Exploit DB Packet Storm

196589	4.3	MEDIUM Network	dolibarr	dolibarr	In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an…	CWE-863 Incorrect Authorization	CVE-2021-25954	2024-11-21 14:55	2021-08-10	Show	GitHub Exploit DB Packet Storm

196590	5.3	MEDIUM Network	samsung	smart_touch_call	Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview.	NVD-CWE-Other	CVE-2021-25448	2024-11-21 14:55	2021-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed