Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249131 7.5 危険 IBM - IBM Rational ClearQuest のメンテナンスツールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1390 2012-05-16 11:51 2012-05-10 Show GitHub Exploit DB Packet Storm
249132 4 警告 baserCMSユーザー会 - baserCMS におけるセッション管理不備の脆弱性 CWE-noinfo
情報不足 		CVE-2012-1248 2012-05-15 12:05 2012-05-15 Show GitHub Exploit DB Packet Storm
249133 4.3 警告 KENT-WEB - KENT-WEB 製 WEB MART におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1247 2012-05-15 12:05 2012-05-15 Show GitHub Exploit DB Packet Storm
249134 2.6 注意 KENT-WEB - KENT-WEB 製 WEB MART におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1246 2012-05-15 12:04 2012-05-15 Show GitHub Exploit DB Packet Storm
249135 4.3 警告 PNG Development Group - libpng の png_handle_sCAL 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2692 2012-05-15 10:48 2011-07-17 Show GitHub Exploit DB Packet Storm
249136 9.3 危険 アップル - Apple iOS および Mac OS X の HFS における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0642 2012-05-15 10:47 2012-03-8 Show GitHub Exploit DB Packet Storm
249137 9.3 危険 アップル - Windows 上で稼動する Apple Safari の ImageIO におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0241 2012-05-15 10:45 2011-07-21 Show GitHub Exploit DB Packet Storm
249138 6.8 警告 libarchive - libarchive におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1778 2012-05-14 18:09 2012-04-13 Show GitHub Exploit DB Packet Storm
249139 6.8 警告 libarchive - libarchive の archive_read_support_format_iso9660.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1777 2012-05-14 18:08 2012-04-13 Show GitHub Exploit DB Packet Storm
249140 2.1 注意 アップル - Apple Mac OS X の CoreStorage および Kernel における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3212 2012-05-14 18:07 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197101 9.8 CRITICAL
Network 		rsshub rsshub RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Func… - CVE-2021-21278 2024-11-21 14:47 2021-01-27 Show GitHub Exploit DB Packet Storm
197102 5.4 MEDIUM
Network 		flarum sticky Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14… - CVE-2021-21283 2024-11-21 14:47 2021-01-27 Show GitHub Exploit DB Packet Storm
197103 6.5 MEDIUM
Network 		tendermint tendermint Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. … - CVE-2021-21271 2024-11-21 14:47 2021-01-27 Show GitHub Exploit DB Packet Storm
197104 4.3 MEDIUM
Network 		report_project
oracle 		report
communications_cloud_native_core_network_slice_selection_function
communications_pricing_design_center 		The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a re… CWE-352
 Origin Validation Error 		CVE-2021-21275 2024-11-21 14:47 2021-01-26 Show GitHub Exploit DB Packet Storm
197105 5.5 MEDIUM
Local 		octopus octopusdsc OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC version 4.0.977 and earlier a customer API ke… - CVE-2021-21270 2024-11-21 14:47 2021-01-23 Show GitHub Exploit DB Packet Storm
197106 7.7 HIGH
Network 		deislabs oras ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before vers… CWE-59
Link Following 		CVE-2021-21272 2024-11-21 14:47 2021-01-26 Show GitHub Exploit DB Packet Storm
197107 5.4 MEDIUM
Network 		bigprof online_invoicing_system Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini. In OIS version 4.0 there is a stored XS… - CVE-2021-21260 2024-11-21 14:47 2021-01-23 Show GitHub Exploit DB Packet Storm
197108 6.1 MEDIUM
Network 		hedgedoc hedgedoc HedgeDoc is open source software which lets you create real-time collaborative markdown notes. In HedgeDoc before version 1.7.2, an attacker can inject arbitrary JavaScript into a HedgeDoc note, whic… - CVE-2021-21259 2024-11-21 14:47 2021-01-23 Show GitHub Exploit DB Packet Storm
197109 5.3 MEDIUM
Network 		onlinevotingsystem_project onlinevotingsystem OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there… CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2021-21253 2024-11-21 14:47 2021-01-22 Show GitHub Exploit DB Packet Storm
197110 6.5 MEDIUM
Network 		pysaml2_project
debian 		pysaml2
debian_linux 		PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default C… - CVE-2021-21239 2024-11-21 14:47 2021-01-22 Show GitHub Exploit DB Packet Storm