Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258541 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-362
競合状態
CVE-2010-0489 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
258542 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0267 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
258543 10 危険 アップル - Apple Mac OS X の xar におけるパッケージ署名の検証処理に関する脆弱性 CWE-DesignError
CVE-2010-0055 2010-04-16 16:59 2010-03-29 Show GitHub Exploit DB Packet Storm
258544 0 注意 アップル - Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0534 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258545 5 警告 アップル - Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0523 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258546 9 危険 アップル - Apple Mac OS X のサーバ管理における管理者権限の処理に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0522 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258547 5 警告 アップル - Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-0521 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258548 4.3 警告 アップル
Ruby on Rails project
- Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4214 2010-04-16 16:58 2009-12-7 Show GitHub Exploit DB Packet Storm
258549 4.3 警告 アップル
Ruby on Rails project
- Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3009 2010-04-16 16:58 2009-09-8 Show GitHub Exploit DB Packet Storm
258550 7.5 危険 アップル
Ruby on Rails project
- Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2009-2422 2010-04-16 16:57 2009-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200141 5.3 MEDIUM
Network
adobe magento_open_source
magento_commerce
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation c… - CVE-2021-21012 2024-11-21 14:47 2021-01-14 Show GitHub Exploit DB Packet Storm
200142 7.0 HIGH
Local
adobe captivate Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write t… CWE-427
 Uncontrolled Search Path Element
CVE-2021-21011 2024-11-21 14:47 2021-01-14 Show GitHub Exploit DB Packet Storm
200143 7.0 HIGH
Local
adobe incopy InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation… - CVE-2021-21010 2024-11-21 14:47 2021-01-14 Show GitHub Exploit DB Packet Storm
200144 8.6 HIGH
Network
adobe campaign_classic Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side re… - CVE-2021-21009 2024-11-21 14:47 2021-01-14 Show GitHub Exploit DB Packet Storm
200145 7.0 HIGH
Local
adobe animate Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issu… - CVE-2021-21008 2024-11-21 14:47 2021-01-14 Show GitHub Exploit DB Packet Storm
200146 7.0 HIGH
Local
adobe illustrator Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this … - CVE-2021-21007 2024-11-21 14:47 2021-01-14 Show GitHub Exploit DB Packet Storm
200147 8.6 HIGH
Local
adobe photoshop Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. Successful exploitation could lead to arbitrary code execut… - CVE-2021-21006 2024-11-21 14:47 2021-01-14 Show GitHub Exploit DB Packet Storm
200148 5.3 MEDIUM
Network
laravel laravel Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which … CWE-89
SQL Injection
CVE-2021-21263 2024-11-21 14:47 2021-01-20 Show GitHub Exploit DB Packet Storm
200149 8.8 HIGH
Network
onedev_project onedev OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. This issue may lead to arbitrary file write. The KubernetesResource REST endpoint… - CVE-2021-21251 2024-11-21 14:47 2021-01-16 Show GitHub Exploit DB Packet Storm
200150 6.5 MEDIUM
Network
onedev_project onedev OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is… - CVE-2021-21250 2024-11-21 14:47 2021-01-16 Show GitHub Exploit DB Packet Storm