Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250431	6.2	警告	Fedora Project レッドハット	-	389 Directory Server のバックアップおよび復旧スクリプトにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0532	2012-03-27 18:42	2011-02-23	Show	GitHub Exploit DB Packet Storm

250432	9.3	危険	VideoLAN	-	VideoLAN VLC media player の demux/mkv/mkv.hpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0531	2012-03-27 18:42	2011-01-26	Show	GitHub Exploit DB Packet Storm

250433	7.5	危険	Wouter Verhelst	-	nbd の nbd-server.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0530	2012-03-27 18:42	2011-02-22	Show	GitHub Exploit DB Packet Storm

250434	5	警告	VMware	-	VMware の vFabric tc Server におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2011-0527	2012-03-27 18:42	2011-08-11	Show	GitHub Exploit DB Packet Storm

250435	4.3	警告	Vanilla Forums	-	Vanilla Forums の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0526	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

250436	6.8	警告	VideoLAN	-	VideoLAN VLC メディアプレイヤーの StripTags 関数における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0522	2012-03-27 18:42	2011-02-7	Show	GitHub Exploit DB Packet Storm

250437	7.5	危険	MaraDNS	-	MaraDNS の compress_add_dlabel_points 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-0520	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

250438	7.5	危険	gallarific	-	Gallarific PHP Photo Gallery script の gallery.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0519	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250439	5.1	警告	lotuscms	-	LotusCMS Fraise の core/lib/router.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0518	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250440	7.5	危険	epromptc	-	E-PROMPT C BetMore Site Suite における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0516	2012-03-27 18:42	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195901	7.5	HIGH Network	vmware	identity_manager workspace_one_access cloud_foundation vrealize_suite_lifecycle_manager	VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute forc…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2021-22003	2024-11-21 14:49	2021-09-1	Show	GitHub Exploit DB Packet Storm

195902	9.8	CRITICAL Network	vmware	identity_manager workspace_one_access cloud_foundation vrealize_suite_lifecycle_manager	VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network…	CWE-287 Improper Authentication	CVE-2021-22002	2024-11-21 14:49	2021-09-1	Show	GitHub Exploit DB Packet Storm

195903	7.5	HIGH Network	vmware	workspace_one_uem_console	VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor with access to /API/system/admins/session could cause an API denial of service due to improper rate lim…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2021-22029	2024-11-21 14:49	2021-09-1	Show	GitHub Exploit DB Packet Storm

195904	9.8	CRITICAL Network	att	xmill	A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. A specially crafted XML file can lead to a heap buffer overflow. An attacker can…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2021-21811	2024-11-21 14:49	2021-09-1	Show	GitHub Exploit DB Packet Storm

195905	5.4	MEDIUM Network	vmware	vrealize_log_insight cloud_foundation	VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user privileges may be able to inject a mali…	CWE-79 Cross-site Scripting	CVE-2021-22021	2024-11-21 14:49	2021-08-31	Show	GitHub Exploit DB Packet Storm

195906	7.5	HIGH Network	vmware	vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager	The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manage…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-22027	2024-11-21 14:49	2021-08-31	Show	GitHub Exploit DB Packet Storm

195907	7.5	HIGH Network	vmware	vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager	The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manage…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-22026	2024-11-21 14:49	2021-08-31	Show	GitHub Exploit DB Packet Storm

195908	7.5	HIGH Network	vmware	vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager	The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to …	CWE-287 Improper Authentication	CVE-2021-22025	2024-11-21 14:49	2021-08-31	Show	GitHub Exploit DB Packet Storm

195909	7.5	HIGH Network	vmware	vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager	The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2021-22024	2024-11-21 14:49	2021-08-31	Show	GitHub Exploit DB Packet Storm

195910	7.2	HIGH Network	vmware	vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager	The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modi…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2021-22023	2024-11-21 14:49	2021-08-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed