Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249021	7.5	危険	HyperMethod IBS	-	Hypermethod eLearning Server の news.php4 における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2923	2012-05-23 19:34	2012-05-21	Show	GitHub Exploit DB Packet Storm

249022	5	警告	Drupal	-	Drupal の includes/bootstrap.inc 内の request_path 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-2922	2012-05-23 19:33	2012-05-21	Show	GitHub Exploit DB Packet Storm

249023	3.5	注意	Geoff Davies	-	Drupal 用 Contact Forms モジュールにおけるモジュールの設定を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2340	2012-05-23 19:12	2012-05-21	Show	GitHub Exploit DB Packet Storm

249024	4.3	警告	Nancy Wichmann	-	Drupal 用 Glossary モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2339	2012-05-23 19:00	2012-05-21	Show	GitHub Exploit DB Packet Storm

249025	2.6	注意	Ishmael Sanchez	-	Drupal 用 Aberdeen テーマの aberdeen_breadcrumb 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2907	2012-05-23 18:57	2012-05-21	Show	GitHub Exploit DB Packet Storm

249026	5	警告	mark pilgrim	-	Universal Feed Parser におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-2921	2012-05-23 18:50	2012-05-2	Show	GitHub Exploit DB Packet Storm

249027	4.3	警告	Weston Ruter	-	WordPress 用 User Photo プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2920	2012-05-23 18:48	2012-05-21	Show	GitHub Exploit DB Packet Storm

249028	4.3	警告	Andrew Killen	-	WordPress 用 Share and Follow プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2917	2012-05-23 18:47	2012-05-21	Show	GitHub Exploit DB Packet Storm

249029	4.3	警告	dlo	-	WordPress 用 Sabre プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2916	2012-05-23 18:46	2012-05-21	Show	GitHub Exploit DB Packet Storm

249030	4.3	警告	Hind	-	WordPress 用 Leaflet プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2913	2012-05-23 18:41	2012-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197091	6.5	MEDIUM Network	google debian fedoraproject	chrome debian_linux fedora	Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.	CWE-787 Out-of-bounds Write	CVE-2021-21222	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197092	6.5	MEDIUM Network	google debian fedoraproject	chrome debian_linux fedora	Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HT…	CWE-20 Improper Input Validation	CVE-2021-21221	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197093	8.8	HIGH Network	google fedoraproject	chrome fedora	Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-787 Out-of-bounds Write	CVE-2021-21220	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197094	5.5	MEDIUM Local	google debian fedoraproject	chrome debian_linux fedora	Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.	CWE-252 Unchecked Return Value	CVE-2021-21219	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197095	5.5	MEDIUM Local	google debian fedoraproject	chrome debian_linux fedora	Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.	CWE-908 Use of Uninitialized Resource	CVE-2021-21218	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197096	5.5	MEDIUM Local	google debian fedoraproject	chrome debian_linux fedora	Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.	CWE-252 Unchecked Return Value	CVE-2021-21217	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197097	6.5	MEDIUM Network	google debian fedoraproject	chrome debian_linux fedora	Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.	CWE-290 Authentication Bypass by Spoofing	CVE-2021-21216	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197098	6.5	MEDIUM Network	google debian fedoraproject	chrome debian_linux fedora	Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.	CWE-290 Authentication Bypass by Spoofing	CVE-2021-21215	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197099	8.8	HIGH Network	google debian fedoraproject	chrome debian_linux fedora	Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.	CWE-416 Use After Free	CVE-2021-21214	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

197100	8.8	HIGH Network	google debian fedoraproject	chrome debian_linux fedora	Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-416 Use After Free	CVE-2021-21213	2024-11-21 14:47	2021-04-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed