Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258661	4.3	警告	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3757	2010-09-14 15:53	2009-10-22	Show	GitHub Exploit DB Packet Storm

258662	7.2	危険	シトリックス・システムズ	-	Xen の xend におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5716	2010-09-14 15:53	2008-12-24	Show	GitHub Exploit DB Packet Storm

258663	6	警告	VMware	-	VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-2667	2010-09-13 16:05	2010-07-13	Show	GitHub Exploit DB Packet Storm

258664	4.4	警告	VMware	-	VMware Studio における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2427	2010-09-13 16:05	2010-07-13	Show	GitHub Exploit DB Packet Storm

258665	6.8	警告	VMware	-	VMware SpringSource tc Server Runtime における JMX インターフェイスへのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-1454	2010-09-13 16:05	2010-05-13	Show	GitHub Exploit DB Packet Storm

258666	4.3	警告	VMware	-	VMware View におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1143	2010-09-13 16:04	2010-05-5	Show	GitHub Exploit DB Packet Storm

258667	4.9	警告	VMware	-	複数の VMware 製品の hcmon.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3761	2010-09-13 16:04	2008-08-21	Show	GitHub Exploit DB Packet Storm

258668	2.1	注意	VMware	-	VMware VirtualCenter におけるパスワードを盗まれる脆弱性	CWE-200 情報漏えい	CVE-2008-4278	2010-09-13 16:04	2008-10-3	Show	GitHub Exploit DB Packet Storm

258669	5	警告	VMware	-	VMware VirtualCenter における他のシステムユーザに権限を割り当てられる脆弱性	CWE-200 情報漏えい	CVE-2008-3514	2010-09-13 16:03	2008-08-12	Show	GitHub Exploit DB Packet Storm

258670	5	警告	VMware	-	VMware Server の ISAPI 拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3697	2010-09-13 16:02	2008-08-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196661	7.8	HIGH Local	amd	epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware	A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.	NVD-CWE-noinfo	CVE-2021-26324	2024-11-21 14:56	2022-05-11	Show	GitHub Exploit DB Packet Storm

196662	8.8	HIGH Network	tobesoft	xplatform	A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent pat…	CWE-22 Path Traversal	CVE-2021-26629	2024-11-21 14:56	2022-04-27	Show	GitHub Exploit DB Packet Storm

196663	6.1	MEDIUM Network	maxb	maxboard	Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insuf…	CWE-79 Cross-site Scripting	CVE-2021-26628	2024-11-21 14:56	2022-04-27	Show	GitHub Exploit DB Packet Storm

196664	7.5	HIGH Network	qcp	qcp200w_firmware	Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay comman…	CWE-287 Improper Authentication	CVE-2021-26627	2024-11-21 14:56	2022-04-20	Show	GitHub Exploit DB Packet Storm

196665	8.8	HIGH Network	tobesoft	xplatform	Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first param…	CWE-20 Improper Input Validation	CVE-2021-26626	2024-11-21 14:56	2022-04-20	Show	GitHub Exploit DB Packet Storm

196666	8.8	HIGH Network	tobesoft	nexacro	Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an automatic update function that does not v…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2021-26625	2024-11-21 14:56	2022-04-20	Show	GitHub Exploit DB Packet Storm

196667	8.8	HIGH Network	escanav	escan_anti-virus	An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroo…	CWE-20 Improper Input Validation	CVE-2021-26624	2024-11-21 14:56	2022-04-2	Show	GitHub Exploit DB Packet Storm

196668	9.8	CRITICAL Network	bandisoft	bandizip	A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2021-26623	2024-11-21 14:56	2022-04-2	Show	GitHub Exploit DB Packet Storm

196669	8.1	HIGH Network	impresscms	impresscms	ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.	CWE-22 Path Traversal	CVE-2021-26601	2024-11-21 14:56	2022-03-28	Show	GitHub Exploit DB Packet Storm

196670	9.8	CRITICAL Network	impresscms	impresscms	ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).	CWE-843 Type Confusion	CVE-2021-26600	2024-11-21 14:56	2022-03-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed