Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227491 5.7 警告 VMware
Linux
- Linux kernel の napi_reuse_skb 関数におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-Other
その他
CVE-2011-1478 2012-12-25 18:45 2011-10-12 Show GitHub Exploit DB Packet Storm
227492 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の fs/nfs/nfs4proc.c 内にある __nfs4_proc_set_acl 関数における脆弱性 CWE-399
リソース管理の問題
CVE-2011-1090 2012-12-25 18:42 2011-05-9 Show GitHub Exploit DB Packet Storm
227493 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の mac_partition 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-1010 2012-12-25 18:41 2011-02-24 Show GitHub Exploit DB Packet Storm
227494 2.1 注意 VMware
Linux
レッドハット
- Linux kernel の task_show_regs 関数における任意プロセスのレジスタ値を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-0710 2012-12-25 18:39 2011-02-18 Show GitHub Exploit DB Packet Storm
227495 6.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の load_mixer_volumes 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2011-0521 2012-12-25 18:38 2011-02-2 Show GitHub Exploit DB Packet Storm
227496 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の sctp_icmp_proto_unreachable 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2010-4526 2012-12-25 18:34 2011-01-11 Show GitHub Exploit DB Packet Storm
227497 2.1 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の install_special_mapping 関数における mmap_min_addr 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4346 2012-12-25 18:32 2010-12-22 Show GitHub Exploit DB Packet Storm
227498 4.7 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の drivers/scsi/bfa/bfa_core.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-4343 2012-12-25 18:31 2010-12-29 Show GitHub Exploit DB Packet Storm
227499 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の igb_receive_skb 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-4263 2012-12-25 18:30 2011-01-18 Show GitHub Exploit DB Packet Storm
227500 6.1 警告 サイバートラスト株式会社
VMware
シトリックス・システムズ
レッドハット
- Xen の fixup_page_fault 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-4255 2012-12-25 18:28 2011-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195321 9.8 CRITICAL
Network
ts-nodash_project ts-nodash All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge() function due to lack of validation input. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2021-23403 2024-11-21 14:51 2021-07-3 Show GitHub Exploit DB Packet Storm
195322 9.8 CRITICAL
Network
record-like-deep-assign_project record-like-deep-assign All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2021-23402 2024-11-21 14:51 2021-07-3 Show GitHub Exploit DB Packet Storm
195323 7.8 HIGH
Local
tibco spotfire_server
spotfire_statistics_services
spotfire_analytics_platform
enterprise_runtime_for_r
The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server E… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2021-23275 2024-11-21 14:51 2021-06-30 Show GitHub Exploit DB Packet Storm
195324 8.8 HIGH
Network
nodemailer nodemailer The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object. CWE-74
Injection
CVE-2021-23400 2024-11-21 14:51 2021-06-29 Show GitHub Exploit DB Packet Storm
195325 9.8 CRITICAL
Network
wincred_project wincred This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to us… CWE-78
OS Command 
CVE-2021-23399 2024-11-21 14:51 2021-06-28 Show GitHub Exploit DB Packet Storm
195326 6.1 MEDIUM
Network
react-bootstrap-table_project react-bootstrap-table All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting (XSS) via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to… CWE-79
Cross-site Scripting
CVE-2021-23398 2024-11-21 14:51 2021-06-25 Show GitHub Exploit DB Packet Storm
195327 5.9 MEDIUM
Network
bosch b426_firmware When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Fir… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2021-23846 2024-11-21 14:51 2021-06-18 Show GitHub Exploit DB Packet Storm
195328 8.8 HIGH
Network
bosch b426_firmware
b426-cn_firmware
b429-cn_firmware
b426-m_firmware
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found durin… NVD-CWE-noinfo
CVE-2021-23845 2024-11-21 14:51 2021-06-18 Show GitHub Exploit DB Packet Storm
195329 9.8 CRITICAL
Network
lutils_project lutils All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2021-23396 2024-11-21 14:51 2021-06-18 Show GitHub Exploit DB Packet Storm
195330 5.3 MEDIUM
Network
nedb_project nedb This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2021-23395 2024-11-21 14:51 2021-06-16 Show GitHub Exploit DB Packet Storm