Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250371	7.5	危険	サン・マイクロシステムズレッドハット	-	OpenJDK Runtime Environment の IcedTea-Web における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0706	2012-03-27 18:43	2011-02-15	Show	GitHub Exploit DB Packet Storm

250372	3.3	注意	daniel friesel	-	feh の feh_unique_filename 関数における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0702	2012-03-27 18:43	2011-02-14	Show	GitHub Exploit DB Packet Storm

250373	4	警告	WordPress.org	-	WordPress の wp-admin/async-upload.php における投稿の下書きを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-0701	2012-03-27 18:43	2011-02-7	Show	GitHub Exploit DB Packet Storm

250374	10	危険	IBM	-	IBM TCR で使用される IBM TIP における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-0732	2012-03-27 18:43	2010-11-3	Show	GitHub Exploit DB Packet Storm

250375	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0735	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

250376	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0734	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

250377	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0733	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

250378	6.5	警告	Canonical Eucalyptus Systems	-	UEC などで使用される Eucalyptus における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0730	2012-03-27 18:43	2011-06-2	Show	GitHub Exploit DB Packet Storm

250379	7.2	危険	Canonical	-	language-selector の D-Bus バックエンドにおけるファイルを改ざんされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0729	2012-03-27 18:43	2011-04-29	Show	GitHub Exploit DB Packet Storm

250380	3.5	注意	michael hudson-doyle	-	Loggerhead の templatefunctions.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0728	2012-03-27 18:43	2011-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195891	6.5	MEDIUM Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-21993	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

195892	6.5	MEDIUM Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or…	NVD-CWE-noinfo	CVE-2021-21992	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

195893	7.8	HIGH Local	vmware	vcenter_server cloud_foundation	The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may explo…	NVD-CWE-noinfo	CVE-2021-21991	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

195894	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated att…	CWE-862 Missing Authorization	CVE-2021-22149	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

195895	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user ga…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-22148	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

195896	6.5	MEDIUM Network	elastic	elasticsearch	Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized …	CWE-862 Missing Authorization	CVE-2021-22147	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

195897	4.3	MEDIUM Network	gitlab	gitlab	An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.	CWE-863 Incorrect Authorization	CVE-2021-22239	2024-11-21 14:49	2021-09-10	Show	GitHub Exploit DB Packet Storm

195898	8.8	HIGH Network	ribbonsoft fedoraproject debian	dxflib extra_packages_for_enterprise_linux fedora debian_linux	A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can …	-	CVE-2021-21897	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

195899	6.4	MEDIUM Local	saltstack fedoraproject	salt fedora	An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This …	CWE-362 Race Condition	CVE-2021-22004	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

195900	7.5	HIGH Network	saltstack fedoraproject debian	salt fedora debian_linux	An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.	NVD-CWE-noinfo	CVE-2021-21996	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed