Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251581	4.3	警告	マカフィーソフォス Beijing Rising International Software Comodo BitDefender FRISK Software International nProtect Authentium エフ・セキュアアラジン	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1431	2012-03-26 12:27	2012-03-21	Show	GitHub Exploit DB Packet Storm

251582	4.3	警告	マカフィーソフォス Beijing Rising International Software Comodo BitDefender nProtect エフ・セキュアアラジン	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1430	2012-03-26 12:26	2012-03-21	Show	GitHub Exploit DB Packet Storm

251583	4.3	警告	マカフィー Ikarus Comodo BitDefender Emsisoft nProtect エフ・セキュアアラジン	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1429	2012-03-26 12:25	2012-03-21	Show	GitHub Exploit DB Packet Storm

251584	4.3	警告	Norman ソフォスクイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1428	2012-03-26 12:15	2012-03-21	Show	GitHub Exploit DB Packet Storm

251585	4.3	警告	Norman ソフォスクイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1427	2012-03-26 11:58	2012-03-21	Show	GitHub Exploit DB Packet Storm

251586	4.3	警告	K7 Computing Norman Beijing Rising International Software FRISK Software International クイックヒール・テクノロジーズ・ジャパン株式会社 Authentium	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1426	2012-03-26 11:56	2012-03-21	Show	GitHub Exploit DB Packet Storm

251587	4.3	警告	ESET トレンドマイクロ Antiy Labs マカフィー Ikarus Norman クイックヒール・テクノロジーズ・ジャパン株式会社 PC Tools フォーティネットカスペルスキー Emsisoft Avira シマンテック Jiangmin	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1425	2012-03-26 11:52	2012-03-21	Show	GitHub Exploit DB Packet Storm

251588	4.3	警告	Antiy Labs Norman ソフォスクイックヒール・テクノロジーズ・ジャパン株式会社 PC Tools Jiangmin	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1424	2012-03-26 11:44	2012-03-21	Show	GitHub Exploit DB Packet Storm

251589	4.3	警告	ESET K7 Computing Ikarus Norman VirusBuster Beijing Rising International Software FRISK Software International PC Tools フォーティネット Emsisoft Authentium	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1423	2012-03-26 11:39	2012-03-21	Show	GitHub Exploit DB Packet Storm

251590	4.3	警告	Beijing Rising International Software Norman ESET クイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1422	2012-03-26 11:36	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195181	9.8	CRITICAL Network	c2fo	comb	All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23561	2024-11-21 14:51	2021-12-11	Show	GitHub Exploit DB Packet Storm

195182	9.1	CRITICAL Network	h2database	h2	The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data fr…	CWE-611 XXE	CVE-2021-23463	2024-11-21 14:51	2021-12-11	Show	GitHub Exploit DB Packet Storm

195183	7.2	HIGH Network	bosch	bosch_video_management_system video_recording_manager videojet_decoder_7513_firmware videojet_decoder_8000_firmware	A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BV…	CWE-78 OS Command	CVE-2021-23862	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195184	6.5	MEDIUM Network	bosch	bosch_video_management_system video_recording_manager	By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software.…	NVD-CWE-Other	CVE-2021-23861	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195185	6.1	MEDIUM Network	bosch	bosch_video_management_system video_recording_manager	An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header tha…	CWE-79 Cross-site Scripting	CVE-2021-23860	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195186	7.5	HIGH Network	bosch	bosch_video_management_system video_recording_manager access_easy_controller_firmware video_recording_manager_exporter building_integration_system access_professional_edition	An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to …	CWE-755 Improper Handling of Exceptional Conditions	CVE-2021-23859	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195187	7.5	HIGH Network	citrix	application_delivery_controller_firmware gateway sd-wan	An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface acce…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-22956	2024-11-21 14:51	2021-12-7	Show	GitHub Exploit DB Packet Storm

195188	7.5	HIGH Network	citrix	application_delivery_controller_firmware gateway	A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to caus…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-22955	2024-11-21 14:51	2021-12-7	Show	GitHub Exploit DB Packet Storm

195189	9.8	CRITICAL Network	ajaxpro.2_project	ajaxpro.2	All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code exec…	CWE-502 Deserialization of Untrusted Data	CVE-2021-23758	2024-11-21 14:51	2021-12-4	Show	GitHub Exploit DB Packet Storm

195190	8.8	HIGH Network	tiny	plupload	This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-23562	2024-11-21 14:51	2021-12-4	Show	GitHub Exploit DB Packet Storm