Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258741 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
258742 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
258743 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
258744 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
258745 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
258746 9.3 危険 マイクロソフト - Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3135 2010-01-6 14:44 2009-11-10 Show GitHub Exploit DB Packet Storm
258747 5 警告 トレンドマイクロ
日本電気
Apache Software Foundation
富士通
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
レッドハット		 - Apache Tomcat の Apache HTTP Server との組合せによるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-0450 2010-01-6 14:43 2007-03-16 Show GitHub Exploit DB Packet Storm
258748 9.3 危険 マイクロソフト - Microsoft Office Excel および Open XML File Format Converter におけるオブジェクトを含むスプレッドシートの処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3133 2010-01-5 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
258749 9.3 危険 マイクロソフト - Microsoft Office Excel および Open XML File Format Converter における BIFF レコードの処理に関する任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-3130 2010-01-5 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
258750 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるエクセルファイルのフォーマットの処理に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3134 2010-01-5 16:18 2009-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194741 7.8 HIGH
Local 		autodesk design_review A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary co… CWE-787
 Out-of-bounds Write 		CVE-2021-27034 2024-11-21 14:57 2021-07-10 Show GitHub Exploit DB Packet Storm
194742 7.8 HIGH
Local 		autodesk design_review A Double Free vulnerability allows remote attackers to execute arbitrary code on PDF files within affected installations of Autodesk Design Review 2018, 2017, 2013, 2012, 2011. User interaction is re… CWE-415
 Double Free 		CVE-2021-27033 2024-11-21 14:57 2021-07-10 Show GitHub Exploit DB Packet Storm
194743 7.8 HIGH
Local 		deltaww dopsoft Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code. - CVE-2021-27412 2024-11-21 14:57 2021-07-2 Show GitHub Exploit DB Packet Storm
194744 6.5 MEDIUM
Network 		apache druid In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than inten… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2021-26920 2024-11-21 14:57 2021-07-2 Show GitHub Exploit DB Packet Storm
194745 7.8 HIGH
Local 		autodesk advance_steel
autocad
autocad_architecture
civil_3d
autocad_electrical
autocad_lt
autocad_map_3d
autocad_mechanical
autocad_mep
autocad_plant_3d
dwg_trueview 		An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need … CWE-787
 Out-of-bounds Write 		CVE-2021-27043 2024-11-21 14:57 2021-06-25 Show GitHub Exploit DB Packet Storm
194746 7.8 HIGH
Local 		autodesk advance_steel
autocad
autocad_architecture
civil_3d
autocad_electrical
autocad_lt
autocad_map_3d
autocad_mechanical
autocad_mep
autocad_plant_3d 		A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which cau… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2021-27042 2024-11-21 14:57 2021-06-25 Show GitHub Exploit DB Packet Storm
194747 7.8 HIGH
Local 		autodesk
iconics
mitsubishielectric 		design_review
advance_steel
autocad
autocad_architecture
civil_3d
autocad_electrical
autocad_lt
autocad_map_3d
autocad_mechanical
autocad_mep
autocad_plant_3d
genesis… 		A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code CWE-787
 Out-of-bounds Write 		CVE-2021-27041 2024-11-21 14:57 2021-06-25 Show GitHub Exploit DB Packet Storm
194748 3.3 LOW
Local 		autodesk
iconics
mitsubishielectric 		advance_steel
autocad
autocad_architecture
civil_3d
autocad_electrical
autocad_lt
autocad_map_3d
autocad_mechanical
autocad_mep
autocad_plant_3d
dwg_trueview
genesis6… 		A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code. CWE-125
Out-of-bounds Read 		CVE-2021-27040 2024-11-21 14:57 2021-06-25 Show GitHub Exploit DB Packet Storm
194749 9.8 CRITICAL
Network 		siemens sinamics_sl150_firmware
sinamics_sm150_firmware
sinamics_sm150i_firmware 		SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service cond… - CVE-2021-27388 2024-11-21 14:57 2021-06-16 Show GitHub Exploit DB Packet Storm
194750 7.5 HIGH
Network 		hitachienergy relion_670_firmware
relion_650_firmware
relion_sam600-io_firmware
rtu500_firmware
reb500_firmware
fox615_tego1_firmware
modular_switchgear_monitoring_firmware
gms600_firmware
… 		Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, … CWE-20
 Improper Input Validation  		CVE-2021-27196 2024-11-21 14:57 2021-06-15 Show GitHub Exploit DB Packet Storm