Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228461 6.5 警告 IBM - IBM Netezza の WebAdmin アプリケーションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5760 2013-02-21 18:23 2012-02-20 Show GitHub Exploit DB Packet Storm
228462 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3328 2013-02-21 18:23 2012-02-15 Show GitHub Exploit DB Packet Storm
228463 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3327 2013-02-21 18:22 2012-02-15 Show GitHub Exploit DB Packet Storm
228464 3.5 注意 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3322 2013-02-21 18:21 2012-02-15 Show GitHub Exploit DB Packet Storm
228465 6.5 警告 IBM - IBM SmartCloud Control Desk におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3321 2013-02-21 18:21 2012-02-15 Show GitHub Exploit DB Packet Storm
228466 3.5 注意 IBM - 複数の IBM 製品の TPAE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3316 2013-02-21 18:20 2012-02-15 Show GitHub Exploit DB Packet Storm
228467 7.5 危険 IBM - IBM SAN Volume Controller および Storwize の管理 GUI における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2012-6354 2013-02-21 18:20 2013-02-5 Show GitHub Exploit DB Packet Storm
228468 5 警告 シスコシステムズ - Cisco Unity Connection におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-1129 2013-02-21 16:41 2013-02-15 Show GitHub Exploit DB Packet Storm
228469 6.8 警告 シスコシステムズ - 複数の Cisco 製品のコマンドラインインターフェイスにおける root 権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1125 2013-02-21 16:40 2013-02-15 Show GitHub Exploit DB Packet Storm
228470 2.6 注意 コンクリートファイブ - concrete5 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5181 2013-02-20 16:01 2012-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194231 9.8 CRITICAL
Network
ronomon opened The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untruste… CWE-78
OS Command 
CVE-2021-29300 2024-11-21 15:00 2021-05-25 Show GitHub Exploit DB Packet Storm
194232 7.5 HIGH
Network
qnap quts_hero
qts
A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity.… CWE-22
Path Traversal
CVE-2021-28798 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194233 7.5 HIGH
Network
cesnet libyang In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags … CWE-252
 Unchecked Return Value
CVE-2021-28906 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194234 7.5 HIGH
Network
cesnet libyang In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617… CWE-617
 Reachable Assertion
CVE-2021-28905 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194235 7.5 HIGH
Network
cesnet libyang In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead … CWE-252
 Unchecked Return Value
CVE-2021-28904 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194236 7.5 HIGH
Network
cesnet libyang A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and le… CWE-674
 Uncontrolled Recursion
CVE-2021-28903 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194237 7.5 HIGH
Network
cesnet libyang In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->f… CWE-252
 Unchecked Return Value
CVE-2021-28902 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194238 7.5 HIGH
Network
envoyproxy envoy An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion. CWE-617
 Reachable Assertion
CVE-2021-29258 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194239 7.5 HIGH
Network
envoyproxy envoy An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received. CWE-476
 NULL Pointer Dereference
CVE-2021-28683 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194240 7.5 HIGH
Network
envoyproxy envoy An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large grpc-timeout value leads to unexpected timeout calculations. CWE-190
 Integer Overflow or Wraparound
CVE-2021-28682 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm