Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
260841 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における http URL または file URL の SSL インジケータを偽装される脆弱性 CWE-Other
その他 		CVE-2009-3984 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
260842 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性 CWE-Other
その他 		CVE-2009-3983 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
260843 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-3389 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
260844 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3388 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
260845 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3982 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
260846 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3981 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
260847 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3980 2010-01-28 12:15 2009-12-15 Show GitHub Exploit DB Packet Storm
260848 10 危険 アドビシステムズ - Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3792 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
260849 5 警告 アドビシステムズ - Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3791 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
260850 5.8 警告 PostgreSQL.org
ターボリナックス
サン・マイクロシステムズ		 - PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-4034 2010-01-26 11:48 2009-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201021 7.2 HIGH
Network 		craftercms crafter_cms Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers t… CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2021-23258 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
201022 9.8 CRITICAL
Network 		html-to-csv_project html-to-csv This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV … CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2021-23654 2024-11-21 14:51 2021-11-27 Show GitHub Exploit DB Packet Storm
201023 8.8 HIGH
Network 		ui unifi_protect A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with ma… NVD-CWE-noinfo
CVE-2021-22957 2024-11-21 14:51 2021-11-25 Show GitHub Exploit DB Packet Storm
201024 9.0 CRITICAL
Network 		quobject docker-cli-js This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arb… CWE-78
OS Command  		CVE-2021-23732 2024-11-21 14:51 2021-11-23 Show GitHub Exploit DB Packet Storm
201025 7.5 HIGH
Network 		ssrf-agent_project ssrf-agent The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery (SSRF) via the defaultIpChecker function. It fails to properly validate if the IP requested is private. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-23718 2024-11-21 14:51 2021-11-23 Show GitHub Exploit DB Packet Storm
201026 6.1 MEDIUM
Network 		pekeupload_project pekeupload This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed. CWE-79
Cross-site Scripting 		CVE-2021-23673 2024-11-21 14:51 2021-11-23 Show GitHub Exploit DB Packet Storm
201027 4.1 MEDIUM
Local 		nvidia dgx-1_p100
dgx-1_v100
dgx-2
dgx_station_a100
drive_constellation
geforce_gt_605
geforce_gt_610
geforce_gt_620
geforce_gt_625
geforce_gt_630
geforce_gt_635
geforce_gt_… 		NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by identifying, exploiting, and … NVD-CWE-noinfo
CVE-2021-23219 2024-11-21 14:51 2021-11-21 Show GitHub Exploit DB Packet Storm
201028 7.5 HIGH
Local 		nvidia geforce_gt_605
geforce_gt_610
geforce_gt_620
geforce_gt_625
geforce_gt_630
geforce_gt_635
geforce_gt_640
geforce_gt_705
geforce_gt_710
geforce_gt_720
geforce_gt_730
g… 		NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time… NVD-CWE-noinfo
CVE-2021-23217 2024-11-21 14:51 2021-11-21 Show GitHub Exploit DB Packet Storm
201029 7.5 HIGH
Local 		nvidia geforce_gtx_950
geforce_gtx_960
geforce_gtx_970
geforce_gtx_980
geforce_gtx_titan_x
jetson_nano
jetson_tx1
quadro_m1000m
quadro_m1200
quadro_m2000
quadro_m2000m
quadr… 		NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loadi… NVD-CWE-noinfo
CVE-2021-23201 2024-11-21 14:51 2021-11-21 Show GitHub Exploit DB Packet Storm
201030 9.8 CRITICAL
Network 		algolia algoliasearch-helper The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protect… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23433 2024-11-21 14:51 2021-11-20 Show GitHub Exploit DB Packet Storm