Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 29, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 260891 | 0 | 注意 | アップル | - | Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0534 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 260892 | 5 | 警告 | アップル | - | Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-0523 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 260893 | 9 | 危険 | アップル | - | Apple Mac OS X のサーバ管理における管理者権限の処理に関する脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0522 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 260894 | 5 | 警告 | アップル | - | Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2010-0521 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 260895 | 4.3 | 警告 | アップル Ruby on Rails project |
- | Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4214 | 2010-04-16 16:58 | 2009-12-7 | Show | GitHub Exploit DB Packet Storm |
| 260896 | 4.3 | 警告 | アップル Ruby on Rails project |
- | Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3009 | 2010-04-16 16:58 | 2009-09-8 | Show | GitHub Exploit DB Packet Storm |
| 260897 | 7.5 | 危険 | アップル Ruby on Rails project |
- | Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-2422 | 2010-04-16 16:57 | 2009-07-10 | Show | GitHub Exploit DB Packet Storm |
| 260898 | 6.8 | 警告 | アップル | - | Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0526 | 2010-04-16 16:57 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 260899 | 6.8 | 警告 | アップル | - | Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0520 | 2010-04-16 16:57 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 260900 | 6.8 | 警告 | アップル | - | Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0519 | 2010-04-16 16:57 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 29, 2026, 4:19 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 190691 | 6.3 |
MEDIUM
Network |
xstream_project debian fedoraproject netapp oracle |
xstream debian_linux fedora snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on… | - | CVE-2021-39140 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190692 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39154 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190693 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39153 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190694 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework retail_xstore_point_of_service communications_unified_inventory_management communications_billing_… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39151 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190695 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39149 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190696 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39148 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190697 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39147 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190698 | 8.5 |
HIGH
Network |
xstream_project fedoraproject debian netapp oracle |
xstream fedora debian_linux snapmanager webcenter_portal utilities_framework retail_xstore_point_of_service communications_unified_inventory_management communications_billing_… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39146 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190699 | 8.5 |
HIGH
Network |
xstream_project debian fedoraproject netapp oracle |
xstream debian_linux fedora snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only … | - | CVE-2021-39145 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |
| 190700 | 8.5 |
HIGH
Network |
xstream_project debian fedoraproject netapp oracle |
xstream debian_linux fedora snapmanager webcenter_portal utilities_framework communications_unified_inventory_management communications_billing_and_revenue_management_elastic_cha… |
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only … |
CWE-306 CWE-502 Missing Authentication for Critical Function Deserialization of Untrusted Data |
CVE-2021-39144 | 2024-11-21 15:18 | 2021-08-24 | Show | GitHub Exploit DB Packet Storm |