Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258701 7.8 危険 Linux
レッドハット
- Linux kernel の selinux_parse_skb_ipv6 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2005-4886 2010-03-15 16:40 2005-10-5 Show GitHub Exploit DB Packet Storm
258702 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2003-1589 2010-03-15 16:39 2003-12-2 Show GitHub Exploit DB Packet Storm
258703 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2003-1590 2010-03-15 16:39 2003-08-13 Show GitHub Exploit DB Packet Storm
258704 7.1 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の handle_dr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3722 2010-03-15 15:23 2009-10-30 Show GitHub Exploit DB Packet Storm
258705 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4406 2010-03-12 15:13 2009-12-23 Show GitHub Exploit DB Packet Storm
258706 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Network Management Card におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1798 2010-03-12 15:13 2009-12-28 Show GitHub Exploit DB Packet Storm
258707 6.8 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Network Management Card におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-1797 2010-03-12 15:12 2009-12-28 Show GitHub Exploit DB Packet Storm
258708 6.6 警告 日立 - JP1/Cm2/Network Node Manager のリモートコンソールにおけるファイルパーミッションの脆弱性 CWE-264
認可・権限・アクセス制御
- 2010-03-12 15:12 2010-02-26 Show GitHub Exploit DB Packet Storm
258709 9.3 危険 Panda Security - Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題 CWE-94
コード・インジェクション
CVE-2009-3735 2010-03-12 15:12 2010-02-12 Show GitHub Exploit DB Packet Storm
258710 5 警告 サイバートラスト株式会社
OpenSSL Project
IBM
レッドハット
- OpenSSL の dtls1_retrieve_buffered_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1379 2010-03-12 14:44 2009-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195811 7.5 HIGH
Network
apache
debian
fedoraproject
oracle
http_server
debian_linux
fedora
instantis_enterprisetrack
enterprise_manager_ops_center
zfs_storage_appliance_kit
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service CWE-476
 NULL Pointer Dereference
CVE-2021-26690 2024-11-21 14:56 2021-06-10 Show GitHub Exploit DB Packet Storm
195812 5.5 MEDIUM
Local
xen
arm
broadcom
intel
fedoraproject
xen
cortex-a72
bcm2711
core_i7-7700k
xeon_silver_4214
core_i9-9900k
core_i7-10700k
fedora
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause… CWE-203
 Information Exposure Through Discrepancy
CVE-2021-26314 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195813 5.5 MEDIUM
Local
xen
arm
broadcom
intel
debian
xen
cortex-a72
bcm2711
core_i7-7700k
xeon_silver_4214
core_i9-9900k
core_i7-10700k
debian_linux
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorre… CWE-203
 Information Exposure Through Discrepancy
CVE-2021-26313 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195814 7.1 HIGH
Network
microsoft sharepoint_foundation
sharepoint_enterprise_server
sharepoint_server
Microsoft SharePoint Server Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-26420 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195815 4.8 MEDIUM
Network
microsoft windows_10
windows_server_2008
windows_7
windows_server_2012
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019
windows_server_2022
windows_server
Windows DCOM Server Security Feature Bypass NVD-CWE-noinfo
CVE-2021-26414 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195816 8.8 HIGH
Network
vembu bdr_suite
offsite_dr
Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in this family may be affected too.) CWE-352
 Origin Validation Error
CVE-2021-26474 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195817 9.8 CRITICAL
Network
vembu bdr_suite
offsite_dr
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitrary files in the context of the web serve… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2021-26473 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195818 9.8 CRITICAL
Network
vembu bdr_suite
offsite_dr
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker ca… CWE-78
OS Command 
CVE-2021-26472 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195819 9.8 CRITICAL
Network
vembu bdr_suite
offsite_dr
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php accepts a command argument. Using this command argument an unauthenticated attacker can execu… NVD-CWE-noinfo
CVE-2021-26471 2024-11-21 14:56 2021-06-9 Show GitHub Exploit DB Packet Storm
195820 6.1 MEDIUM
Network
hp oneview_for_vmware_vcenter A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerabili… CWE-79
Cross-site Scripting
CVE-2021-26584 2024-11-21 14:56 2021-06-3 Show GitHub Exploit DB Packet Storm