Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258721 9.3 危険 VMware - VMnc メディアコーデックおよびムービーデコーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1564 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
258722 10 危険 VMware - VMware Remote Console の vmware-vmrc.exe build 158248 における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2009-3732 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
258723 7.2 危険 VMware - 複数の VMware 製品の vmrun における権限昇格の脆弱性 CWE-134
書式文字列の問題 		CVE-2010-1139 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
258724 5 警告 VMware - 複数の VMware 製品の仮想ネットワークスタックにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1138 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
258725 8.5 危険 VMware - 複数の VMware 製品の VMware Tools における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1142 2010-05-7 17:24 2010-04-9 Show GitHub Exploit DB Packet Storm
258726 8.5 危険 VMware - 複数の VMware 製品の VMware Tools における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1141 2010-05-7 17:24 2010-04-9 Show GitHub Exploit DB Packet Storm
258727 5 警告 アップル
サイバートラスト株式会社
レッドハット
ターボリナックス
CUPS		 - CUPS の ippReadIO 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0949 2010-05-7 16:55 2009-06-3 Show GitHub Exploit DB Packet Storm
258728 6.8 警告 レッドハット
サイバートラスト株式会社
ターボリナックス
CUPS		 - CUPS の TIFF イメージデコーディングルーチンにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0163 2010-05-7 16:51 2009-04-16 Show GitHub Exploit DB Packet Storm
258729 4.6 警告 GNU Project
サイバートラスト株式会社
レッドハット		 - GNU cpio における大きなサイズのファイル処理によるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2005-4268 2010-05-7 16:51 2005-12-15 Show GitHub Exploit DB Packet Storm
258730 4.3 警告 日本電気
Apache Software Foundation		 - Apache Xerces C++ におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-1885 2010-05-6 13:47 2009-08-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194371 5.4 MEDIUM
Network 		sitasoftware azurcms Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2)… CWE-79
Cross-site Scripting 		CVE-2021-28901 2024-11-21 15:00 2021-09-16 Show GitHub Exploit DB Packet Storm
194372 8.8 HIGH
Network 		qnap qutscloud
quts_hero
qts 		A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have a… CWE-787
 Out-of-bounds Write 		CVE-2021-28816 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194373 7.5 HIGH
Network 		qnap qsw-m2116p-2t2s_firmware
qunetswitch 		A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote a… CWE-922
 Insecure Storage of Sensitive Information 		CVE-2021-28813 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194374 6.5 MEDIUM
Network 		bab-technologie eibport_firmware BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an … CWE-521
Weak Password Requirements  		CVE-2021-28914 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194375 9.8 CRITICAL
Network 		bab-technologie eibport_firmware BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the … CWE-306
Missing Authentication for Critical Function 		CVE-2021-28913 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194376 7.2 HIGH
Network 		bab-technologie eibport_firmware BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH… CWE-798
CWE-521
 Use of Hard-coded Credentials
Weak Password Requirements  		CVE-2021-28912 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194377 9.8 CRITICAL
Network 		bab-technologie eibport_firmware BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains some sensitive data (e.g. device serial number). Having those info, a possible l… CWE-307
CWE-863
mproper Restriction of Excessive Authentication Attempts
 Incorrect Authorization 		CVE-2021-28911 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194378 7.5 HIGH
Network 		bab-technologie eibport_firmware BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-28910 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194379 9.8 CRITICAL
Network 		bab-technologie eibport_firmware BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login service at /webif/SecurityModule in a brute force attack. The password could be we… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2021-28909 2024-11-21 15:00 2021-09-10 Show GitHub Exploit DB Packet Storm
194380 7.8 HIGH
Local 		xen
debian
fedoraproject 		xen
debian_linux
fedora 		Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire… CWE-362
Race Condition 		CVE-2021-28701 2024-11-21 15:00 2021-09-8 Show GitHub Exploit DB Packet Storm