Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258561	10	危険	IBM	-	IBM Lotus Domino のサーバにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0358	2010-07-16 15:35	2010-01-20	Show	GitHub Exploit DB Packet Storm

258562	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1203	2010-07-15 21:46	2010-06-22	Show	GitHub Exploit DB Packet Storm

258563	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Windows 7 上で稼働する Mozilla Firefox における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1121	2010-07-15 17:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

258564	2.1	注意	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性	CWE-Other その他	CVE-2008-5913	2010-07-15 17:20	2009-01-20	Show	GitHub Exploit DB Packet Storm

258565	7.4	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 の rename_principal_2_svc() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2798	2010-07-15 17:20	2007-06-26	Show	GitHub Exploit DB Packet Storm

258566	7.9	危険	日本電気サイバートラスト株式会社 MIT Kerberos ヒューレット・パッカードターボリナックスレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性	-	CVE-2007-2443	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

258567	9.3	危険	日本電気サイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性	-	CVE-2007-2442	2010-07-15 17:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

258568	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2277	2010-07-14 17:27	2010-03-29	Show	GitHub Exploit DB Packet Storm

258569	6.9	警告	VMware	-	複数の VMware 製品の USB サービスにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1140	2010-07-14 17:27	2010-04-9	Show	GitHub Exploit DB Packet Storm

258570	9.3	危険	シマンテック	-	Symantec Workspace Streaming (旧 Symantec AppStream) に脆弱性	CWE-287 不適切な認証	CVE-2008-4389	2010-07-14 17:26	2010-06-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196061	6.1	MEDIUM Network	odoo	odoo	Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a …	CWE-79 Cross-site Scripting	CVE-2021-26263	2024-11-21 14:56	2023-04-26	Show	GitHub Exploit DB Packet Storm

196062	9.8	CRITICAL Network	vivo	frame_service	The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions.	NVD-CWE-noinfo	CVE-2021-26277	2024-11-21 14:56	2023-02-18	Show	GitHub Exploit DB Packet Storm

196063	9.8	CRITICAL Network	mangboard	mangboard_wp	SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute a…	CWE-89 SQL Injection	CVE-2021-26644	2024-11-21 14:56	2023-01-21	Show	GitHub Exploit DB Packet Storm

196064	9.8	CRITICAL Network	xpressengine	xpressengine	When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient verification of the file. A remote attacke…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-26642	2024-11-21 14:56	2023-01-21	Show	GitHub Exploit DB Packet Storm

196065	7.8	HIGH Local	amd	milanpi_firmware	Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity.	CWE-120 Classic Buffer Overflow	CVE-2021-26409	2024-11-21 14:56	2023-01-11	Show	GitHub Exploit DB Packet Storm

196066	5.5	MEDIUM Local	amd	romepi_firmware	A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure.	CWE-330 Use of Insufficiently Random Values	CVE-2021-26407	2024-11-21 14:56	2023-01-11	Show	GitHub Exploit DB Packet Storm

196067	6.5	MEDIUM Local	amd	epyc_7001_firmware epyc_7251_firmware epyc_7261_firmware epyc_7281_firmware epyc_7301_firmware epyc_7351_firmware epyc_7351p_firmware epyc_7371_firmware epyc_7401_firmware …	Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.	NVD-CWE-noinfo	CVE-2021-26403	2024-11-21 14:56	2023-01-11	Show	GitHub Exploit DB Packet Storm

196068	7.1	HIGH Local	amd	epyc_7h12_firmware epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7742_firmware epyc_7702p_firmware epyc_7702_firmware epyc_7662_firmware epyc_7642_firmware …	Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regio…	CWE-787 Out-of-bounds Write	CVE-2021-26402	2024-11-21 14:56	2023-01-11	Show	GitHub Exploit DB Packet Storm

196069	7.8	HIGH Local	amd	epyc_7h12_firmware epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7742_firmware epyc_7702p_firmware epyc_7702_firmware epyc_7662_firmware epyc_7642_firmware …	Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential …	CWE-787 Out-of-bounds Write	CVE-2021-26398	2024-11-21 14:56	2023-01-11	Show	GitHub Exploit DB Packet Storm

196070	4.4	MEDIUM Local	amd	epyc_7003_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_7373x_firmware epyc_73f3_firmware epyc_7413_firmware epyc_7443_firmware	Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.	CWE-345 Insufficient Verification of Data Authenticity	CVE-2021-26396	2024-11-21 14:56	2023-01-11	Show	GitHub Exploit DB Packet Storm