Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225131	4.3	警告	Drupal	-	Drupal 用 EventCalendar モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1607	2014-02-18 17:31	2014-01-23	Show	GitHub Exploit DB Packet Storm

225132	7.5	危険	Restlet	-	Restlet の ObjectRepresentation クラスのデフォルト設定における任意の Java コードを実行される脆弱性	CWE-16 環境設定	CVE-2013-4271	2014-02-18 17:24	2013-09-7	Show	GitHub Exploit DB Packet Storm

225133	7.5	危険	Restlet	-	Restlet の ObjectRepresentation クラスのデフォルト設定における任意の Java コードを実行される脆弱性	CWE-16 環境設定	CVE-2013-4221	2014-02-18 17:23	2013-09-7	Show	GitHub Exploit DB Packet Storm

225134	4.7	警告	Linux	-	Linux Kernel の net/llc/af_llc.c における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-3231	2014-02-18 17:17	2013-04-7	Show	GitHub Exploit DB Packet Storm

225135	6.8	警告	PostgreSQL.org レッドハット	-	PostgreSQL におけるサービス運用妨害 (サーバクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0255	2014-02-18 15:26	2013-02-7	Show	GitHub Exploit DB Packet Storm

225136	9.3	危険	Poster Software	-	Poster Software PUBLISH-iT におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0980	2014-02-18 10:41	2014-02-5	Show	GitHub Exploit DB Packet Storm

225137	5	警告	GNU Project レッドハット	-	glibc におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0242	2014-02-17 18:43	2013-02-8	Show	GitHub Exploit DB Packet Storm

225138	4.3	警告	レッドハット	-	Spacewalk および Red Hat Network Satellite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4415	2014-02-17 15:11	2013-06-28	Show	GitHub Exploit DB Packet Storm

225139	3.5	注意	レッドハット	-	Spacewalk および Red Hat Network Satellite の account/EditAddress.do におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1871	2014-02-17 15:10	2013-03-19	Show	GitHub Exploit DB Packet Storm

225140	3.5	注意	レッドハット	-	Spacewalk および Red Hat Network Satellite の systems/sdc/notes.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6149	2014-02-17 15:10	2012-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201121	9.8	CRITICAL Network	pac-resolver_project	pac-resolver	This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. NOTE: The fix for this vulnerability is applied in the node-deg…	NVD-CWE-noinfo	CVE-2021-23406	2024-11-21 14:51	2021-08-24	Show	GitHub Exploit DB Packet Storm

201122	5.3	MEDIUM Network	trim-off-newlines_project	trim-off-newlines	All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.	NVD-CWE-noinfo	CVE-2021-23425	2024-11-21 14:51	2021-08-19	Show	GitHub Exploit DB Packet Storm

201123	7.5	HIGH Network	ansi-html_project	ansi-html	This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.	NVD-CWE-noinfo	CVE-2021-23424	2024-11-21 14:51	2021-08-19	Show	GitHub Exploit DB Packet Storm

201124	7.5	HIGH Network	bikeshed_project	bikeshed	This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could …	CWE-22 Path Traversal	CVE-2021-23423	2024-11-21 14:51	2021-08-16	Show	GitHub Exploit DB Packet Storm

201125	7.8	HIGH Local	bikeshed_project	bikeshed	This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command…	CWE-78 OS Command	CVE-2021-23422	2024-11-21 14:51	2021-08-16	Show	GitHub Exploit DB Packet Storm

201126	9.8	CRITICAL Network	merge-change_project	merge-change	All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23421	2024-11-21 14:51	2021-08-12	Show	GitHub Exploit DB Packet Storm

201127	9.8	CRITICAL Network	codeception	codeception	This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializ…	CWE-502 Deserialization of Untrusted Data	CVE-2021-23420	2024-11-21 14:51	2021-08-11	Show	GitHub Exploit DB Packet Storm

201128	9.8	CRITICAL Network	open-graph_project	open-graph	This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23419	2024-11-21 14:51	2021-08-8	Show	GitHub Exploit DB Packet Storm

201129	8.8	HIGH Network	bosch	cpp4_firmware cpp6_firmware aviotec_firmware cpp7_firmware cpp7.3_firmware cpp13_firmware cpp14_firmware	A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requi…	CWE-352 Origin Validation Error	CVE-2021-23849	2024-11-21 14:51	2021-08-6	Show	GitHub Exploit DB Packet Storm

201130	9.8	CRITICAL Network	glances_project	glances	The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.	CWE-611 XXE	CVE-2021-23418	2024-11-21 14:51	2021-07-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed