Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228791 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1257 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228792 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1256 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228793 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1255 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228794 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1254 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228795 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1253 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228796 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1252 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228797 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1251 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228798 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1250 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228799 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1249 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228800 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1248 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194231 9.8 CRITICAL
Network
ronomon opened The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untruste… CWE-78
OS Command 
CVE-2021-29300 2024-11-21 15:00 2021-05-25 Show GitHub Exploit DB Packet Storm
194232 7.5 HIGH
Network
qnap quts_hero
qts
A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity.… CWE-22
Path Traversal
CVE-2021-28798 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194233 7.5 HIGH
Network
cesnet libyang In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags … CWE-252
 Unchecked Return Value
CVE-2021-28906 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194234 7.5 HIGH
Network
cesnet libyang In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617… CWE-617
 Reachable Assertion
CVE-2021-28905 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194235 7.5 HIGH
Network
cesnet libyang In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead … CWE-252
 Unchecked Return Value
CVE-2021-28904 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194236 7.5 HIGH
Network
cesnet libyang A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and le… CWE-674
 Uncontrolled Recursion
CVE-2021-28903 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194237 7.5 HIGH
Network
cesnet libyang In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->f… CWE-252
 Unchecked Return Value
CVE-2021-28902 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194238 7.5 HIGH
Network
envoyproxy envoy An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion. CWE-617
 Reachable Assertion
CVE-2021-29258 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194239 7.5 HIGH
Network
envoyproxy envoy An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received. CWE-476
 NULL Pointer Dereference
CVE-2021-28683 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm
194240 7.5 HIGH
Network
envoyproxy envoy An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large grpc-timeout value leads to unexpected timeout calculations. CWE-190
 Integer Overflow or Wraparound
CVE-2021-28682 2024-11-21 15:00 2021-05-21 Show GitHub Exploit DB Packet Storm