Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
133011 9.8 緊急
Network
Huawei EMUI
Magic UI
複数の Huawei スマートフォンにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2020-9144 2021-09-22 18:11 2020-02-18 Show GitHub Exploit DB Packet Storm
133012 7.2 重要
Network
Nagios Enterprises, LLC Nagios XI Nagios XI における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2020-35578 2021-09-22 18:11 2020-12-19 Show GitHub Exploit DB Packet Storm
133013 7.5 重要
Network
jQueryValidation
NetApp
SnapCenter
jQuery Validation
jQuery Validation プラグインにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2021-21252 2021-09-22 18:11 2021-01-10 Show GitHub Exploit DB Packet Storm
133014 7.2 重要
Network
coturn project coturn Coturn における計算の誤りに関する脆弱性 CWE-441
CWE-682
CVE-2020-26262 2021-09-22 18:11 2020-10-1 Show GitHub Exploit DB Packet Storm
133015 9.8 緊急
Network
ctolog ThinkAdmin ThinkAdmin における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2020-23653 2021-09-22 18:11 2020-01-2 Show GitHub Exploit DB Packet Storm
133016 7.1 重要
Network
Gin Team Gin gin における HTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2020-28483 2021-09-22 17:54 2020-11-19 Show GitHub Exploit DB Packet Storm
133017 8.8 重要
Network
softwaremill akka-http-session akka-http-session におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2020-28452 2021-09-22 17:54 2020-11-25 Show GitHub Exploit DB Packet Storm
133018 5.3 警告
Network
シスコシステムズ
Snort.org
Snort
Cisco FirePOWER Management Center
Cisco Firepower Threat Defense ソフトウェア
Cisco IOS XE
複数の Cisco 製品における常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装
CVE-2021-1236 2021-09-22 17:52 2021-01-13 Show GitHub Exploit DB Packet Storm
133019 6.5 警告
Network
シスコシステムズ Cisco Unified Communications Manager IM and Presence Service
Cisco Emergency Responder ソフトウェア
Cisco Unified Communications Manag…
複数の Cisco 製品におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2021-1226 2021-09-22 17:52 2021-01-13 Show GitHub Exploit DB Packet Storm
133020 7.8 重要
Local
シスコシステムズ Cisco AnyConnect Secure Mobility Client Windows 用 Cisco AnyConnect Secure Mobility Client における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2021-1237 2021-09-22 17:52 2021-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306841 - apple mac_os_x
mac_os_x_server
Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file. CWE-134
Use of Externally-Controlled Format String
CVE-2011-0185 2024-11-21 10:23 2011-10-14 Show GitHub Exploit DB Packet Storm
306842 - apple itunes CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (me… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0259 2024-11-21 10:23 2011-10-13 Show GitHub Exploit DB Packet Storm
306843 - novell groupwise Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0334 2024-11-21 10:23 2011-10-8 Show GitHub Exploit DB Packet Storm
306844 - novell groupwise Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbit… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0333 2024-11-21 10:23 2011-10-8 Show GitHub Exploit DB Packet Storm
306845 - apple quicktime Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associat… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0258 2024-11-21 10:23 2011-09-7 Show GitHub Exploit DB Packet Storm
306846 - ibm runtimes_for_java_technology
java
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of se… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0311 2024-11-21 10:23 2011-09-3 Show GitHub Exploit DB Packet Storm
306847 - indusoft web_studio Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-0342 2024-11-21 10:23 2011-09-3 Show GitHub Exploit DB Packet Storm
306848 - apple iphone_os The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-midd… CWE-20
 Improper Input Validation 
CVE-2011-0228 2024-11-21 10:23 2011-08-30 Show GitHub Exploit DB Packet Storm
306849 - mozilla firefox
seamonkey
thunderbird
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly… CWE-94
Code Injection
CVE-2011-0084 2024-11-21 10:23 2011-08-19 Show GitHub Exploit DB Packet Storm
306850 - apple quicktime Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file th… CWE-189
Numeric Errors
CVE-2011-0257 2024-11-21 10:23 2011-08-16 Show GitHub Exploit DB Packet Storm