Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249511 3.5 注意 SocialCMS - SocialCMS の my_admin/admin1_list_pages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1982 2012-04-9 10:26 2012-04-5 Show GitHub Exploit DB Packet Storm
249512 10 危険 ヒューレット・パッカード - HP-UX 上の Distributed Computing Environment におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-0131 2012-04-9 10:06 2012-04-2 Show GitHub Exploit DB Packet Storm
249513 4.3 警告 ヒューレット・パッカード - HP Business Availability Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0132 2012-04-9 10:02 2012-04-3 Show GitHub Exploit DB Packet Storm
249514 5 警告 ヒューレット・パッカード - HP Onboard Administrator における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0130 2012-04-9 09:59 2012-04-2 Show GitHub Exploit DB Packet Storm
249515 7.6 危険 ヒューレット・パッカード - HP Onboard Administrator におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0129 2012-04-9 09:55 2012-04-2 Show GitHub Exploit DB Packet Storm
249516 5.8 警告 ヒューレット・パッカード - HP Onboard Administrator におけるユーザを任意の Web サイトにリダイレクトされる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0128 2012-04-9 09:51 2012-04-2 Show GitHub Exploit DB Packet Storm
249517 5 警告 GitHub - GitHub Enterprise における public_key[user_id] の値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2055 2012-04-6 16:21 2012-04-4 Show GitHub Exploit DB Packet Storm
249518 5 警告 Redmine - Redmine における属性を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2054 2012-04-6 16:21 2012-03-6 Show GitHub Exploit DB Packet Storm
249519 5 警告 Spree Commerce - Spree のセッション Cookie ストアの実装における暗号保護メカニズムを容易に回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7311 2012-04-6 16:19 2008-08-12 Show GitHub Exploit DB Packet Storm
249520 5 警告 Spree Commerce - Spree における Order ステートの値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7310 2012-04-6 16:16 2008-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196401 4.3 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests CWE-863
 Incorrect Authorization 		CVE-2021-22176 2024-11-21 14:49 2021-03-25 Show GitHub Exploit DB Packet Storm
196402 7.8 HIGH
Local 		huawei manageone There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitat… NVD-CWE-noinfo
CVE-2021-22314 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196403 7.2 HIGH
Network 		huawei manageone There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow c… CWE-276
Incorrect Default Permissions  		CVE-2021-22311 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196404 5.3 MEDIUM
Network 		huawei nip6300_firmware
nip6600_firmware
nip6800_firmware
s12700_firmware
s1700_firmware
s2700_firmware
s5700_firmware
s6700_firmware
s7700_firmware
s9700_firmware
secospace_us… 		There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious opera… CWE-416
 Use After Free 		CVE-2021-22321 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196405 7.5 HIGH
Network 		huawei ips_module_firmware
ngfw_module_firmware
nip6600_firmware
nip6800_firmware
secospace_usg6300_firmware
secospace_usg6500_firmware
secospace_usg6600_firmware 		There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affe… NVD-CWE-noinfo
CVE-2021-22320 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196406 4.4 MEDIUM
Local 		huawei nip6300_firmware
nip6600_firmware
secospace_usg6300_firmware
secospace_usg6500_firmware
secospace_usg6600_firmware
usg9500_firmware 		There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2021-22310 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196407 7.5 HIGH
Network 		huawei usg9500_firmware
usg9520_firmware
usg9560_firmware
usg9580_firmware 		There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive mess… CWE-330
 Use of Insufficiently Random Values 		CVE-2021-22309 2024-11-21 14:49 2021-03-23 Show GitHub Exploit DB Packet Storm
196408 8.8 HIGH
Network 		wireshark
oracle
debian 		wireshark
zfs_storage_appliance
debian_linux 		Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file. CWE-74
Injection 		CVE-2021-22191 2024-11-21 14:49 2021-03-16 Show GitHub Exploit DB Packet Storm
196409 4.3 MEDIUM
Network 		elastic
oracle 		elasticsearch
communications_cloud_native_core_automated_test_suite 		A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions whe… CWE-863
 Incorrect Authorization 		CVE-2021-22134 2024-11-21 14:49 2021-03-9 Show GitHub Exploit DB Packet Storm
196410 4.3 MEDIUM
Network 		fortinet fortiproxy An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on… NVD-CWE-Other
CVE-2021-22128 2024-11-21 14:49 2021-03-5 Show GitHub Exploit DB Packet Storm