Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228271	3.5	注意	Net Genius	-	Drupal 用 MultiLink モジュールにおける任意のノードタイトルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2012-5589	2012-12-28 16:04	2012-11-28	Show	GitHub Exploit DB Packet Storm

228272	2.6	注意	Matthias Hutterer	-	Drupal 用 Email Field モジュールにおける電子メールを送信される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5588	2012-12-28 16:02	2012-11-28	Show	GitHub Exploit DB Packet Storm

228273	4.3	警告	Matthias Hutterer	-	Drupal 用 Email Field モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5587	2012-12-28 15:58	2012-11-28	Show	GitHub Exploit DB Packet Storm

228274	2.1	注意	Marc Ingram	-	Drupal 用 Services モジュールにおける任意のユーザの電子メールにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5586	2012-12-28 15:57	2012-11-28	Show	GitHub Exploit DB Packet Storm

228275	2.1	注意	Mixpanel Project	-	Drupal 用 Mixpanel モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5585	2012-12-28 15:50	2012-11-28	Show	GitHub Exploit DB Packet Storm

228276	4.3	警告	Made to Order Software	-	Drupal 用 Table of Contents モジュールにおけるノードのヘッダを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5584	2012-12-28 15:49	2012-11-14	Show	GitHub Exploit DB Packet Storm

228277	6.8	警告	Sensio Labs	-	Symfony における任意のサービスにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6432	2012-12-28 15:20	2012-12-20	Show	GitHub Exploit DB Packet Storm

228278	6.4	警告	Sensio Labs	-	Symfony における URI の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6431	2012-12-28 15:18	2012-12-20	Show	GitHub Exploit DB Packet Storm

228279	4.3	警告	Sebastian Heinlein Canonical	-	Ubuntu の Aptdaemon における任意のパッケージレポジトリの GPG キーをインストールされる脆弱性	CWE-noinfo 情報不足	CVE-2012-0962	2012-12-28 15:03	2012-12-17	Show	GitHub Exploit DB Packet Storm

228280	2.1	注意	Debian	-	Ubuntu で使用される APT における重要なシェル情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-0961	2012-12-28 14:59	2012-12-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194351	6.5	MEDIUM Network	doctor_appointment_system_project	doctor_appointment_system	SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack.	CWE-89 SQL Injection	CVE-2021-27124	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194352	5.3	MEDIUM Network	containous	traefik	Traefik before 2.4.5 allows the loading of IFRAME elements from other domains.	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2021-27375	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194353	7.8	HIGH Local	denx	u-boot	The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.	NVD-CWE-noinfo	CVE-2021-27138	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194354	7.8	HIGH Local	denx	u-boot	The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.	NVD-CWE-noinfo	CVE-2021-27097	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194355	7.5	HIGH Network	vertigis	weboffice	VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebOffice Applikation."	NVD-CWE-noinfo	CVE-2021-27374	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194356	7.5	HIGH Network	boltcms	bolt	Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.	CWE-22 Path Traversal	CVE-2021-27367	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194357	7.4	HIGH Network	canarymail libmailcore	canary_mail mailcore2	core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.	CWE-295 Improper Certificate Validation	CVE-2021-26911	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194358	9.8	CRITICAL Network	irfanview	wpg	The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow remote attackers to execute arbitrary code.	CWE-125 Out-of-bounds Read	CVE-2021-27362	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194359	7.5	HIGH Network	irfanview	wpg	The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.	CWE-787 Out-of-bounds Write	CVE-2021-27224	2024-11-21 14:57	2021-02-18	Show	GitHub Exploit DB Packet Storm

194360	7.8	HIGH Local	linux fedoraproject	linux_kernel fedora	An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration…	NVD-CWE-noinfo	CVE-2021-26934	2024-11-21 14:57	2021-02-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed