Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249031 4.3 警告 Kolja Schleich - WordPress 用 LeagueManager プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2912 2012-05-23 18:25 2012-05-21 Show GitHub Exploit DB Packet Storm
249032 5 警告 Chevereto Software - Chevereto の Upload/engine.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-2919 2012-05-23 18:19 2012-05-21 Show GitHub Exploit DB Packet Storm
249033 4.3 警告 Chevereto Software - Chevereto の Upload/engine.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2918 2012-05-23 18:18 2012-05-21 Show GitHub Exploit DB Packet Storm
249034 7.5 危険 Johan Cwiklinski - Galette の includes/picture.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2338 2012-05-23 18:16 2012-05-21 Show GitHub Exploit DB Packet Storm
249035 10 危険 DMSoft Technologies - SkinCrafter の InitLicenKeys 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2271 2012-05-23 18:15 2012-05-21 Show GitHub Exploit DB Packet Storm
249036 9.3 危険 Lattice Semiconductor - Lattice Semiconductor PAC-Designer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2915 2012-05-23 18:04 2012-05-21 Show GitHub Exploit DB Packet Storm
249037 5 警告 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-1904 2012-05-23 18:04 2012-03-28 Show GitHub Exploit DB Packet Storm
249038 4.3 警告 unijimpe - Unijimpe Captcha の captchademo.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2914 2012-05-23 18:02 2012-05-21 Show GitHub Exploit DB Packet Storm
249039 4.3 警告 SiliSoftware - SiliSoftware backupDB() の backupDB.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2911 2012-05-23 17:54 2012-05-21 Show GitHub Exploit DB Packet Storm
249040 4.3 警告 SiliSoftware - SiliSoftware phpThumb() におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2910 2012-05-23 17:53 2012-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197121 8.8 HIGH
Network
dlink dap-1880ac_firmware Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified… NVD-CWE-Other
CVE-2021-20694 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
197122 7.5 HIGH
Network
gurunavi gurunavi Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via… CWE-862
 Missing Authorization
CVE-2021-20693 2024-11-21 14:47 2021-04-26 Show GitHub Exploit DB Packet Storm
197123 7.5 HIGH
Network
fibaro home_center_2_firmware
home_center_lite_firmware
In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to … CWE-319
Cleartext Transmission of Sensitive Information
CVE-2021-20992 2024-11-21 14:47 2021-04-19 Show GitHub Exploit DB Packet Storm
197124 8.8 HIGH
Network
fibaro home_center_2_firmware
home_center_lite_firmware
In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability. CWE-77
Command Injection
CVE-2021-20991 2024-11-21 14:47 2021-04-19 Show GitHub Exploit DB Packet Storm
197125 7.5 HIGH
Network
fibaro home_center_2_firmware
home_center_lite_firmware
In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authenticatio… - CVE-2021-20990 2024-11-21 14:47 2021-04-19 Show GitHub Exploit DB Packet Storm
197126 6.5 MEDIUM
Local
adobe robohelp Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to … - CVE-2021-21070 2024-11-21 14:47 2021-04-19 Show GitHub Exploit DB Packet Storm
197127 7.8 HIGH
Local
adobe digital_editions Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to ac… - CVE-2021-21100 2024-11-21 14:47 2021-04-15 Show GitHub Exploit DB Packet Storm
197128 5.5 MEDIUM
Local
adobe bridge Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage t… NVD-CWE-Other
CVE-2021-21096 2024-11-21 14:47 2021-04-15 Show GitHub Exploit DB Packet Storm
197129 7.8 HIGH
Local
adobe bridge Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this v… - CVE-2021-21095 2024-11-21 14:47 2021-04-15 Show GitHub Exploit DB Packet Storm
197130 7.8 HIGH
Local
adobe bridge Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could lever… - CVE-2021-21094 2024-11-21 14:47 2021-04-15 Show GitHub Exploit DB Packet Storm