Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258911 3.5 注意 オラクル - Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2381 2010-07-30 17:43 2010-07-13 Show GitHub Exploit DB Packet Storm
258912 3.5 注意 オラクル - Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0081 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258913 4.3 警告 オラクル - Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0835 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258914 6.4 警告 オラクル - Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2375 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258915 9.3 危険 マイクロソフト - Microsoft Office Outlook における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0266 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258916 9.3 危険 マイクロソフト - Microsoft Office Access の FieldList の ActiveX コントロール における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1881 2010-07-30 17:41 2010-07-13 Show GitHub Exploit DB Packet Storm
258917 9.3 危険 マイクロソフト - Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0814 2010-07-30 17:41 2010-07-13 Show GitHub Exploit DB Packet Storm
258918 2.1 注意 日立
CA Technologies		 - Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2157 2010-07-29 18:57 2010-06-3 Show GitHub Exploit DB Packet Storm
258919 3.5 注意 ターボリナックス
Samba Project		 - Samba の smbd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0926 2010-07-29 18:57 2010-02-24 Show GitHub Exploit DB Packet Storm
258920 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2597 2010-07-28 19:31 2010-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200441 8.8 HIGH
Network 		\@thi.ng\/egf_project \@thi.ng\/egf Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true` option is enabled). PR with patch has been submitted and will has been release… - CVE-2021-21412 2024-11-21 14:48 2021-03-31 Show GitHub Exploit DB Packet Storm
200442 5.4 MEDIUM
Network 		prestashop prestashop PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fi… - CVE-2021-21398 2024-11-21 14:48 2021-03-31 Show GitHub Exploit DB Packet Storm
200443 8.8 HIGH
Network 		jenkins team_foundation_server A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified creden… CWE-352
 Origin Validation Error 		CVE-2021-21638 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200444 6.5 MEDIUM
Network 		jenkins team_foundation_server A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified … CWE-862
 Missing Authorization 		CVE-2021-21637 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200445 4.3 MEDIUM
Network 		jenkins team_foundation_server A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins. CWE-862
 Missing Authorization 		CVE-2021-21636 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200446 5.9 MEDIUM
Network 		netty
debian
netapp
oracle
quarkus 		netty
debian_linux
oncommand_workflow_automation
oncommand_api_services
coherence
banking_trade_finance_process_management
banking_credit_facilities_process_management
banking_co… 		Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http… - CVE-2021-21409 2024-11-21 14:48 2021-03-31 Show GitHub Exploit DB Packet Storm
200447 5.4 MEDIUM
Network 		jenkins rest_list_parameter Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by a… CWE-79
Cross-site Scripting 		CVE-2021-21635 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200448 6.5 MEDIUM
Network 		jenkins jabber_\(xmpp\)_notifier_and_control Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with acces… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-21634 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200449 8.8 HIGH
Network 		jenkins owasp_dependency-track A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in … CWE-352
 Origin Validation Error 		CVE-2021-21633 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
200450 6.5 MEDIUM
Network 		jenkins owasp_dependency-track A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stor… CWE-862
 Missing Authorization 		CVE-2021-21632 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm