Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259321	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

259322	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

259323	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

259324	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

259325	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

259326	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

259327	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

259328	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

259329	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

259330	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195991	5.5	MEDIUM Local	arm	trusted_firmware_m	In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mod…	CWE-787 Out-of-bounds Write	CVE-2021-27562	2024-11-21 14:58	2021-05-26	Show	GitHub Exploit DB Packet Storm

195992	7.5	HIGH Network	mediateknet	netwave_system	An information disclosure vulnerability was discovered in /index.class.php (via port 8181) on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the sy…	NVD-CWE-noinfo	CVE-2021-27823	2024-11-21 14:58	2021-05-25	Show	GitHub Exploit DB Packet Storm

195993	6.1	MEDIUM Network	openwrt	luci	The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution.	CWE-79 Cross-site Scripting	CVE-2021-27821	2024-11-21 14:58	2021-05-25	Show	GitHub Exploit DB Packet Storm

195994	7.2	HIGH Network	qibosoft	qibosoft	A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation of client_upgrade_edition.php and Upgrad…	CWE-94 Code Injection	CVE-2021-27811	2024-11-21 14:58	2021-05-22	Show	GitHub Exploit DB Packet Storm

195995	6.1	MEDIUM Network	zohocorp	manageengine_adselfservice_plus	Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.	CWE-79 Cross-site Scripting	CVE-2021-27956	2024-11-21 14:58	2021-05-21	Show	GitHub Exploit DB Packet Storm

195996	6.1	MEDIUM Network	emerson	x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware	A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page pr…	-	CVE-2021-27467	2024-11-21 14:58	2021-05-20	Show	GitHub Exploit DB Packet Storm

195997	6.1	MEDIUM Network	emerson	x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware	A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbit…	-	CVE-2021-27465	2024-11-21 14:58	2021-05-20	Show	GitHub Exploit DB Packet Storm

195998	5.3	MEDIUM Network	emerson	x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware	A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properl…	-	CVE-2021-27463	2024-11-21 14:58	2021-05-20	Show	GitHub Exploit DB Packet Storm

195999	7.5	HIGH Network	emerson	x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware	A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using speciall…	-	CVE-2021-27461	2024-11-21 14:58	2021-05-20	Show	GitHub Exploit DB Packet Storm

196000	9.8	CRITICAL Network	emerson	x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware	A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker coul…	-	CVE-2021-27459	2024-11-21 14:58	2021-05-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed