Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250501	6.4	警告	Piwik	-	Piwik の Piwik_Common::getIP 関数における位置情報取得とロギング機能を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0398	2012-03-27 18:42	2011-01-10	Show	GitHub Exploit DB Packet Storm

250502	9.3	危険	マイクロソフト	-	Windows XP の Microsoft Internet Explorer における不正な GUI 表示を誘発される脆弱性	CWE-Other その他	CVE-2011-0347	2012-03-27 18:42	2011-01-7	Show	GitHub Exploit DB Packet Storm

250503	3.3	注意	Alcatel-Lucent	-	Alcatel-Lucent OmniVista の NMS サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0345	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250504	5.8	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniPCX Enterprise の CGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0344	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250505	6.9	警告	balabit	-	Balabit syslog-ng におけるログファイルを読み書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0343	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

250506	10	危険	Schneider Electric	-	InduSoft Web Studio の InduSoft ISSymbol ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0342	2012-03-27 18:42	2011-09-2	Show	GitHub Exploit DB Packet Storm

250507	9.3	危険	Artifex Software	-	MuPDF プラグインの pdfmoz_onmouse 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0341	2012-03-27 18:42	2011-05-13	Show	GitHub Exploit DB Packet Storm

250508	9.3	危険	Foxit Software Inc	-	Foxit Reader における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0332	2012-03-27 18:42	2011-02-25	Show	GitHub Exploit DB Packet Storm

250509	9.3	危険	Honeywell International Inc.	-	Honeywell ScanServer ActiveX コントロールの addOSPLext メソッドにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0331	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

250510	5	警告	デル	-	DellSystemLite.ocx の Dell DellSystemLite.Scanner ActiveX コントロールにおける任意の WQL 文を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0330	2012-03-27 18:42	2011-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195891	6.5	MEDIUM Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-21993	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

195892	6.5	MEDIUM Network	vmware	vcenter_server cloud_foundation	The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or…	NVD-CWE-noinfo	CVE-2021-21992	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

195893	7.8	HIGH Local	vmware	vcenter_server cloud_foundation	The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may explo…	NVD-CWE-noinfo	CVE-2021-21991	2024-11-21 14:49	2021-09-23	Show	GitHub Exploit DB Packet Storm

195894	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated att…	CWE-862 Missing Authorization	CVE-2021-22149	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

195895	8.8	HIGH Network	elastic	enterprise_search	Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user ga…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-22148	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

195896	6.5	MEDIUM Network	elastic	elasticsearch	Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized …	CWE-862 Missing Authorization	CVE-2021-22147	2024-11-21 14:49	2021-09-15	Show	GitHub Exploit DB Packet Storm

195897	4.3	MEDIUM Network	gitlab	gitlab	An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.	CWE-863 Incorrect Authorization	CVE-2021-22239	2024-11-21 14:49	2021-09-10	Show	GitHub Exploit DB Packet Storm

195898	8.8	HIGH Network	ribbonsoft fedoraproject debian	dxflib extra_packages_for_enterprise_linux fedora debian_linux	A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can …	-	CVE-2021-21897	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

195899	6.4	MEDIUM Local	saltstack fedoraproject	salt fedora	An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This …	CWE-362 Race Condition	CVE-2021-22004	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm

195900	7.5	HIGH Network	saltstack fedoraproject debian	salt fedora debian_linux	An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.	NVD-CWE-noinfo	CVE-2021-21996	2024-11-21 14:49	2021-09-9	Show	GitHub Exploit DB Packet Storm