Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258731 5 警告 Squid-cache.org - Squid の htcpHandleTstRequest 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0639 2010-03-8 12:28 2010-02-12 Show GitHub Exploit DB Packet Storm
258732 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3302 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
258733 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の filter/ww8/ww8par2.cxx における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3301 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
258734 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2950 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
258735 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2949 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
258736 4.3 警告 アドビシステムズ - Adobe BlazeDS における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3960 2010-03-5 10:32 2010-02-11 Show GitHub Exploit DB Packet Storm
258737 6.8 警告 Linux
レッドハット		 - KVM の pit_ioport_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2010-0309 2010-03-4 13:41 2010-02-9 Show GitHub Exploit DB Packet Storm
258738 4.1 警告 Linux
レッドハット		 - KVM の x86 エミュレータにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0306 2010-03-4 13:41 2010-02-9 Show GitHub Exploit DB Packet Storm
258739 5 警告 レッドハット
リアルネットワークス		 - RealNetworks HelixPlayer および RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0417 2010-03-4 13:40 2010-02-18 Show GitHub Exploit DB Packet Storm
258740 7.5 危険 レッドハット
リアルネットワークス		 - RealNetworks HelixPlayer および RealPlayer の Unescape 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0416 2010-03-4 13:40 2010-02-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197781 9.8 CRITICAL
Network 		c2fo comb All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23561 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
197782 9.1 CRITICAL
Network 		h2database h2 The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data fr… CWE-611
XXE 		CVE-2021-23463 2024-11-21 14:51 2021-12-11 Show GitHub Exploit DB Packet Storm
197783 7.2 HIGH
Network 		bosch bosch_video_management_system
video_recording_manager
videojet_decoder_7513_firmware
videojet_decoder_8000_firmware 		A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BV… CWE-78
OS Command  		CVE-2021-23862 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
197784 6.5 MEDIUM
Network 		bosch bosch_video_management_system
video_recording_manager 		By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software.… NVD-CWE-Other
CVE-2021-23861 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
197785 6.1 MEDIUM
Network 		bosch bosch_video_management_system
video_recording_manager 		An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header tha… CWE-79
Cross-site Scripting 		CVE-2021-23860 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
197786 7.5 HIGH
Network 		bosch bosch_video_management_system
video_recording_manager
access_easy_controller_firmware
video_recording_manager_exporter
building_integration_system
access_professional_edition 		An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-23859 2024-11-21 14:51 2021-12-9 Show GitHub Exploit DB Packet Storm
197787 7.5 HIGH
Network 		citrix application_delivery_controller_firmware
gateway
sd-wan 		An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface acce… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22956 2024-11-21 14:51 2021-12-7 Show GitHub Exploit DB Packet Storm
197788 7.5 HIGH
Network 		citrix application_delivery_controller_firmware
gateway 		A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to caus… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22955 2024-11-21 14:51 2021-12-7 Show GitHub Exploit DB Packet Storm
197789 9.8 CRITICAL
Network 		ajaxpro.2_project ajaxpro.2 All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code exec… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23758 2024-11-21 14:51 2021-12-4 Show GitHub Exploit DB Packet Storm
197790 8.8 HIGH
Network 		tiny plupload This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-23562 2024-11-21 14:51 2021-12-4 Show GitHub Exploit DB Packet Storm