Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
259361 9 危険 アップル - Apple Mac OS X のパスワードサーバにおけるログインアクセスを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-0510 2010-04-15 18:37 2010-03-29 Show GitHub Exploit DB Packet Storm
259362 7.2 危険 アップル - Apple Mac OS X の SFLServer における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0509 2010-04-15 18:37 2010-03-29 Show GitHub Exploit DB Packet Storm
259363 7.8 危険 アップル - Apple Mac OS X の Mail における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2010-0525 2010-04-15 18:36 2010-03-29 Show GitHub Exploit DB Packet Storm
259364 4 警告 アップル
サイバートラスト株式会社
MySQL AB
レッドハット
- MySQL の mysqld におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2009-4019 2010-04-15 18:16 2009-11-30 Show GitHub Exploit DB Packet Storm
259365 6.8 警告 The PHP Group
アップル
- PHP の posix_mkfifo 関数における open_basedir の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3558 2010-04-15 18:16 2009-11-23 Show GitHub Exploit DB Packet Storm
259366 4.4 警告 アップル
サイバートラスト株式会社
MySQL AB
レッドハット
- MySQL における権限チェックを回避される脆弱性 CWE-59
リンク解釈の問題
CVE-2009-4030 2010-04-15 18:16 2009-11-5 Show GitHub Exploit DB Packet Storm
259367 2.6 注意 アップル
サイバートラスト株式会社
MySQL AB
レッドハット
- MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4456 2010-04-15 18:15 2008-10-6 Show GitHub Exploit DB Packet Storm
259368 10 危険 アップル - Apple Mac OS X の Mail における脆弱性 CWE-noinfo
情報不足
CVE-2010-0508 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
259369 6.8 警告 アップル - Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0507 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
259370 6.8 警告 アップル - Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0506 2010-04-14 17:11 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196591 9.8 CRITICAL
Network
amd epyc_72f3_firmware
epyc_7313_firmware
epyc_7313p_firmware
epyc_7343_firmware
epyc_7373x_firmware
epyc_73f3_firmware
epyc_7413_firmware
epyc_7443_firmware
epyc_7443p_firmware
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation. NVD-CWE-noinfo
CVE-2021-26379 2024-11-21 14:56 2023-05-10 Show GitHub Exploit DB Packet Storm
196592 5.5 MEDIUM
Local
amd epyc_7773x_firmware
epyc_7763_firmware
epyc_7713p_firmware
epyc_7713_firmware
epyc_7663_firmware
epyc_7643_firmware
epyc_75f3_firmware
epyc_7573x_firmware
epyc_7543p_firmware<…
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. … NVD-CWE-noinfo
CVE-2021-26371 2024-11-21 14:56 2023-05-10 Show GitHub Exploit DB Packet Storm
196593 8.2 HIGH
Network
amd ryzen_5_2400g_firmware
ryzen_5_2400ge_firmware
ryzen_3_2200ge_firmware
ryzen_3_2200g_firmware
ryzen_3_pro_2100ge_firmware
ryzen_9_5900x_firmware
ryzen_9_5950x_firmware
ryzen_9_59…
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-b… CWE-125
Out-of-bounds Read
CVE-2021-26365 2024-11-21 14:56 2023-05-10 Show GitHub Exploit DB Packet Storm
196594 7.4 HIGH
Network
amd epyc_7001_firmware
epyc_7251_firmware
epyc_7261_firmware
epyc_7281_firmware
epyc_7301_firmware
epyc_7351_firmware
epyc_7351p_firmware
epyc_7371_firmware
epyc_7401_firmware
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-26356 2024-11-21 14:56 2023-05-10 Show GitHub Exploit DB Packet Storm
196595 5.5 MEDIUM
Local
amd epyc_7773x_firmware
epyc_7763_firmware
epyc_7713p_firmware
epyc_7713_firmware
epyc_7663_firmware
epyc_7643_firmware
epyc_75f3_firmware
epyc_7573x_firmware
epyc_7543p_firmware<…
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a los… CWE-120
Classic Buffer Overflow
CVE-2021-26354 2024-11-21 14:56 2023-05-10 Show GitHub Exploit DB Packet Storm
196596 6.1 MEDIUM
Network
odoo odoo Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a … CWE-79
Cross-site Scripting
CVE-2021-26263 2024-11-21 14:56 2023-04-26 Show GitHub Exploit DB Packet Storm
196597 9.8 CRITICAL
Network
vivo frame_service The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions. NVD-CWE-noinfo
CVE-2021-26277 2024-11-21 14:56 2023-02-18 Show GitHub Exploit DB Packet Storm
196598 9.8 CRITICAL
Network
mangboard mangboard_wp SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute a… CWE-89
SQL Injection
CVE-2021-26644 2024-11-21 14:56 2023-01-21 Show GitHub Exploit DB Packet Storm
196599 9.8 CRITICAL
Network
xpressengine xpressengine When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient verification of the file. A remote attacke… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2021-26642 2024-11-21 14:56 2023-01-21 Show GitHub Exploit DB Packet Storm
196600 7.8 HIGH
Local
amd milanpi_firmware Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity. CWE-120
Classic Buffer Overflow
CVE-2021-26409 2024-11-21 14:56 2023-01-11 Show GitHub Exploit DB Packet Storm