Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
259931 7.6 危険 Mozilla Foundation - Mozilla Firefox の nsDocument::MaybePreLoadImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0168 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
259932 9.3 危険 Mozilla Foundation - Mozilla Firefox の imgContainer::InternalAddFrameHelper 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0164 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
259933 4.3 警告 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0171 2010-04-5 14:54 2010-03-23 Show GitHub Exploit DB Packet Storm
259934 4.3 警告 Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0170 2010-04-5 14:53 2010-03-23 Show GitHub Exploit DB Packet Storm
259935 7.5 危険 Heartlogic - HL-SiteManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1331 2010-04-2 15:02 2010-04-2 Show GitHub Exploit DB Packet Storm
259936 9.3 危険 Mozilla Foundation - Mozilla Firefox の Web Open Fonts Format デコーダ における整数オーバーフローの脆弱性 CWE-noinfo
情報不足
CVE-2010-1028 2010-04-2 14:05 2010-03-19 Show GitHub Exploit DB Packet Storm
259937 5 警告 富士通
アクセラテクノロジ
- Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性 CWE-200
情報漏えい
- 2010-04-2 14:05 2010-03-10 Show GitHub Exploit DB Packet Storm
259938 1.9 注意 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3556 2010-04-2 14:02 2010-01-19 Show GitHub Exploit DB Packet Storm
259939 10 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2009-4538 2010-04-2 14:02 2010-01-12 Show GitHub Exploit DB Packet Storm
259940 6.6 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3939 2010-04-2 14:00 2009-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195541 6.5 MEDIUM
Network
magento magento Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper Authorization vulnerability via the 'Create Customer' endpoint. Successful exploita… NVD-CWE-Other
CVE-2021-28563 2024-11-21 14:59 2021-06-28 Show GitHub Exploit DB Packet Storm
195542 8.8 HIGH
Network
adobe acrobat_dc
acrobat_reader_dc
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability when executing search qu… - CVE-2021-28562 2024-11-21 14:59 2021-06-28 Show GitHub Exploit DB Packet Storm
195543 4.8 MEDIUM
Network
magento magento Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitatio… - CVE-2021-28556 2024-11-21 14:59 2021-06-28 Show GitHub Exploit DB Packet Storm
195544 7.5 HIGH
Network
tianocore edk2 Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. NVD-CWE-noinfo
CVE-2021-28213 2024-11-21 14:59 2021-06-12 Show GitHub Exploit DB Packet Storm
195545 6.7 MEDIUM
Local
tianocore edk2 A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CWE-787
 Out-of-bounds Write
CVE-2021-28211 2024-11-21 14:59 2021-06-12 Show GitHub Exploit DB Packet Storm
195546 7.8 HIGH
Local
tianocore edk2 An unlimited recursion in DxeCore in EDK II. CWE-674
 Uncontrolled Recursion
CVE-2021-28210 2024-11-21 14:59 2021-06-12 Show GitHub Exploit DB Packet Storm
195547 5.3 MEDIUM
Network
eclipse
debian
oracle
netapp
jetty
debian_linux
rest_data_services
communications_cloud_native_core_policy
snap_creator_framework
hci
active_iq_unified_manager
management_services_for_element_software
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For… NVD-CWE-Other
CVE-2021-28169 2024-11-21 14:59 2021-06-9 Show GitHub Exploit DB Packet Storm
195548 9.8 CRITICAL
Network
seceon aisiem Seceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature. The lack of correct configuration leads to recovery of the passwor… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2021-28293 2024-11-21 14:59 2021-06-9 Show GitHub Exploit DB Packet Storm
195549 5.4 MEDIUM
Network
zohocorp manageengine_key_manager_plus Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD. CWE-79
Cross-site Scripting
CVE-2021-28382 2024-11-21 14:59 2021-06-7 Show GitHub Exploit DB Packet Storm
195550 7.5 HIGH
Network
entrouvert
debian
fedoraproject
lasso
debian_linux
fedora
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2021-28091 2024-11-21 14:59 2021-06-5 Show GitHub Exploit DB Packet Storm