Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 4:05 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226631 4.3 警告 ヒューレット・パッカード
アドビシステムズ
- Adobe Flash Player におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2444 2013-03-27 17:13 2011-09-21 Show GitHub Exploit DB Packet Storm
226632 9.3 危険 ヒューレット・パッカード
アドビシステムズ
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2430 2013-03-27 17:12 2011-09-21 Show GitHub Exploit DB Packet Storm
226633 5 警告 ヒューレット・パッカード
アドビシステムズ
- Adobe Flash Player におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2429 2013-03-27 17:10 2011-09-21 Show GitHub Exploit DB Packet Storm
226634 9.3 危険 ヒューレット・パッカード
アドビシステムズ
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2428 2013-03-27 17:07 2011-09-21 Show GitHub Exploit DB Packet Storm
226635 9.3 危険 ヒューレット・パッカード
アドビシステムズ
- Adobe Flash Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2427 2013-03-27 17:05 2011-09-21 Show GitHub Exploit DB Packet Storm
226636 9.3 危険 ヒューレット・パッカード
アドビシステムズ
- Adobe Flash Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2426 2013-03-27 17:04 2011-09-21 Show GitHub Exploit DB Packet Storm
226637 10 危険 ヒューレット・パッカード
アドビシステムズ
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2425 2013-03-27 17:03 2011-08-9 Show GitHub Exploit DB Packet Storm
226638 4 警告 Moodle - Moodle の calendar/managesubscriptions.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-1829 2013-03-27 16:40 2013-03-25 Show GitHub Exploit DB Packet Storm
226639 6.7 警告 シマンテック - Symantec NetBackup アプライアンスの管理コンソールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-1608 2013-03-27 16:38 2013-03-20 Show GitHub Exploit DB Packet Storm
226640 5 警告 シスコシステムズ - Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1162 2013-03-27 16:35 2013-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195581 5.4 MEDIUM
Network
concretecms concrete_cms A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security Research Team" CWE-352
 Origin Validation Error
CVE-2021-22953 2024-11-21 14:51 2021-09-23 Show GitHub Exploit DB Packet Storm
195582 8.8 HIGH
Network
ui unifi_talk A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said networ… NVD-CWE-noinfo
CVE-2021-22952 2024-11-21 14:51 2021-09-23 Show GitHub Exploit DB Packet Storm
195583 6.5 MEDIUM
Network
concretecms concrete_cms Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team" CWE-352
 Origin Validation Error
CVE-2021-22950 2024-11-21 14:51 2021-09-23 Show GitHub Exploit DB Packet Storm
195584 5.4 MEDIUM
Network
concretecms concrete_cms A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Researc… CWE-352
 Origin Validation Error
CVE-2021-22949 2024-11-21 14:51 2021-09-23 Show GitHub Exploit DB Packet Storm
195585 7.1 HIGH
Network
revive-adserver revive_adserver Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be … CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-22948 2024-11-21 14:51 2021-09-23 Show GitHub Exploit DB Packet Storm
195586 9.8 CRITICAL
Network
client jointjs This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used in the path parameter are arrays in the setByPath… CWE-843
Type Confusion
CVE-2021-23444 2024-11-21 14:51 2021-09-22 Show GitHub Exploit DB Packet Storm
195587 6.1 MEDIUM
Network
adonisjs edge This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), … CWE-843
Type Confusion
CVE-2021-23443 2024-11-21 14:51 2021-09-22 Show GitHub Exploit DB Packet Storm
195588 9.8 CRITICAL
Network
cookiex-deep_project cookiex-deep This affects all versions of package @cookiex/deep. The global proto object can be polluted using the __proto__ object. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2021-23442 2024-11-21 14:51 2021-09-17 Show GitHub Exploit DB Packet Storm
195589 8.8 HIGH
Network
f5 big-ip_application_security_manager
big-ip_advanced_web_application_firewall
On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web App… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2021-23029 2024-11-21 14:51 2021-09-15 Show GitHub Exploit DB Packet Storm
195590 6.1 MEDIUM
Network
f5 big-ip_application_security_manager
big-ip_advanced_web_application_firewall
big-ip_access_policy_manager
big-ip_advanced_firewall_manager
big-ip_ddos_hybrid_defender
big-ip_applicatio…
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration u… CWE-79
Cross-site Scripting
CVE-2021-23027 2024-11-21 14:51 2021-09-15 Show GitHub Exploit DB Packet Storm