Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260371	10	危険	日立	-	複数の EUR Form 製品および EUR 製品における任意のコードが実行される脆弱性	CWE-noinfo 情報不足	-	2010-05-11 15:16	2010-03-31	Show	GitHub Exploit DB Packet Storm

260372	6.4	警告	マイクロソフト	-	Microsoft Windows における ISATAP パケットの処理に関する IPv4 ソースアドレスの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0812	2010-05-11 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

260373	7.6	危険	マイクロソフト	-	Microsoft Office Visio における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0256	2010-05-11 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

260374	7.6	危険	マイクロソフト	-	Microsoft Office Visio における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0254	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

260375	5	警告	マイクロソフト	-	Microsoft Windows の SMTP コンポーネントにおける情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2010-0025	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

260376	5	警告	マイクロソフト	-	Microsoft Windows の SMTP コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0024	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

260377	9.3	危険	マイクロソフト	-	Microsoft Office Publisher におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0479	2010-05-11 15:14	2010-04-13	Show	GitHub Exploit DB Packet Storm

260378	4.7	警告	マイクロソフト	-	Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0810	2010-05-11 15:14	2010-04-13	Show	GitHub Exploit DB Packet Storm

260379	4.7	警告	マイクロソフト	-	Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0482	2010-05-11 15:14	2010-04-13	Show	GitHub Exploit DB Packet Storm

260380	4.7	警告	マイクロソフト	-	Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0481	2010-05-11 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201121	9.8	CRITICAL Network	pac-resolver_project	pac-resolver	This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-deg…	NVD-CWE-noinfo	CVE-2021-23406	2024-11-21 14:51	2021-08-24	Show	GitHub Exploit DB Packet Storm

201122	5.3	MEDIUM Network	trim-off-newlines_project	trim-off-newlines	All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.	NVD-CWE-noinfo	CVE-2021-23425	2024-11-21 14:51	2021-08-19	Show	GitHub Exploit DB Packet Storm

201123	7.5	HIGH Network	ansi-html_project	ansi-html	This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.	NVD-CWE-noinfo	CVE-2021-23424	2024-11-21 14:51	2021-08-19	Show	GitHub Exploit DB Packet Storm

201124	7.5	HIGH Network	bikeshed_project	bikeshed	This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could …	CWE-22 Path Traversal	CVE-2021-23423	2024-11-21 14:51	2021-08-16	Show	GitHub Exploit DB Packet Storm

201125	7.8	HIGH Local	bikeshed_project	bikeshed	This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command…	CWE-78 OS Command	CVE-2021-23422	2024-11-21 14:51	2021-08-16	Show	GitHub Exploit DB Packet Storm

201126	9.8	CRITICAL Network	merge-change_project	merge-change	All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23421	2024-11-21 14:51	2021-08-12	Show	GitHub Exploit DB Packet Storm

201127	9.8	CRITICAL Network	codeception	codeception	This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializ…	CWE-502 Deserialization of Untrusted Data	CVE-2021-23420	2024-11-21 14:51	2021-08-11	Show	GitHub Exploit DB Packet Storm

201128	9.8	CRITICAL Network	open-graph_project	open-graph	This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23419	2024-11-21 14:51	2021-08-8	Show	GitHub Exploit DB Packet Storm

201129	8.8	HIGH Network	bosch	cpp4_firmware cpp6_firmware aviotec_firmware cpp7_firmware cpp7.3_firmware cpp13_firmware cpp14_firmware	A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requi…	CWE-352 Origin Validation Error	CVE-2021-23849	2024-11-21 14:51	2021-08-6	Show	GitHub Exploit DB Packet Storm

201130	9.8	CRITICAL Network	glances_project	glances	The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.	CWE-611 XXE	CVE-2021-23418	2024-11-21 14:51	2021-07-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed