Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249081 5 警告 GNU Project - Gnash の plugin/npapi/plugin.cpp における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4328 2012-06-20 10:35 2012-06-16 Show GitHub Exploit DB Packet Storm
249082 7.5 危険 Ryan Tomayko - Rack::Cache rubygem における重要なクッキー情報を取得される脆弱性 CWE-DesignError
CVE-2012-2671 2012-06-20 10:19 2012-06-17 Show GitHub Exploit DB Packet Storm
249083 6.5 警告 Open Dynamics - Collabtive の manageuser.php におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2670 2012-06-20 10:18 2012-06-17 Show GitHub Exploit DB Packet Storm
249084 6.8 警告 WordPress.org - WordPress 用 FCChat Widget プラグインの html/Upload.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3578 2012-06-19 16:56 2012-06-17 Show GitHub Exploit DB Packet Storm
249085 7.5 危険 nmedia - WordPress 用 Nmedia Member Conversation プラグインにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3577 2012-06-19 16:55 2012-06-17 Show GitHub Exploit DB Packet Storm
249086 9.3 危険 FlightGear
SimGear		 - FlightGear および SimGear におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2091 2012-06-19 16:54 2012-06-17 Show GitHub Exploit DB Packet Storm
249087 9.3 危険 FlightGear
SimGear		 - FlightGear および SimGear におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2012-2090 2012-06-19 16:52 2012-06-17 Show GitHub Exploit DB Packet Storm
249088 10 危険 jquindlen - WordPress 用 wpStoreCart プラグインの php/upload.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3576 2012-06-19 16:51 2012-06-16 Show GitHub Exploit DB Packet Storm
249089 10 危険 RBX Gallery - WordPress 用 RBX Gallery プラグインの uploader.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3575 2012-06-19 16:50 2012-06-16 Show GitHub Exploit DB Packet Storm
249090 7.5 危険 MM Forms - WordPress 用 MM Forms Community プラグインにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2012-3574 2012-06-19 16:48 2012-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196941 7.8 HIGH
Local 		huawei manageone There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitat… NVD-CWE-noinfo
CVE-2021-22314 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196942 7.2 HIGH
Network 		huawei manageone There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow c… CWE-276
Incorrect Default Permissions  		CVE-2021-22311 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196943 5.3 MEDIUM
Network 		huawei nip6300_firmware
nip6600_firmware
nip6800_firmware
s12700_firmware
s1700_firmware
s2700_firmware
s5700_firmware
s6700_firmware
s7700_firmware
s9700_firmware
secospace_us… 		There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious opera… CWE-416
 Use After Free 		CVE-2021-22321 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196944 7.5 HIGH
Network 		huawei ips_module_firmware
ngfw_module_firmware
nip6600_firmware
nip6800_firmware
secospace_usg6300_firmware
secospace_usg6500_firmware
secospace_usg6600_firmware 		There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affe… NVD-CWE-noinfo
CVE-2021-22320 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196945 4.4 MEDIUM
Local 		huawei nip6300_firmware
nip6600_firmware
secospace_usg6300_firmware
secospace_usg6500_firmware
secospace_usg6600_firmware
usg9500_firmware 		There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2021-22310 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196946 7.5 HIGH
Network 		huawei usg9500_firmware
usg9520_firmware
usg9560_firmware
usg9580_firmware 		There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive mess… CWE-330
 Use of Insufficiently Random Values 		CVE-2021-22309 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196947 8.8 HIGH
Network 		wireshark
oracle
debian 		wireshark
zfs_storage_appliance
debian_linux 		Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file. CWE-74
Injection 		CVE-2021-22191 2024-11-21 14:49 2021-03-16 Show GitHub Exploit DB Packet Storm
196948 4.3 MEDIUM
Network 		elastic
oracle 		elasticsearch
communications_cloud_native_core_automated_test_suite 		A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions whe… CWE-863
 Incorrect Authorization 		CVE-2021-22134 2024-11-21 14:49 2021-03-9 Show GitHub Exploit DB Packet Storm
196949 4.3 MEDIUM
Network 		fortinet fortiproxy An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on… NVD-CWE-Other
CVE-2021-22128 2024-11-21 14:49 2021-03-5 Show GitHub Exploit DB Packet Storm
196950 7.2 HIGH
Network 		gitlab gitlab Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues. CWE-295
Improper Certificate Validation  		CVE-2021-22189 2024-11-21 14:49 2021-03-5 Show GitHub Exploit DB Packet Storm