Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251591	4.3	警告	Beijing Rising International Software シマンテック Norman クイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1421	2012-03-26 11:35	2012-03-21	Show	GitHub Exploit DB Packet Storm

251592	4.3	警告	ESET K7 Computing Norman Beijing Rising International Software FRISK Software International クイックヒール・テクノロジーズ・ジャパン株式会社フォーティネットマイクロソフト Panda Security カスペルスキー Authentium	-	複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1420	2012-03-26 11:35	2012-03-21	Show	GitHub Exploit DB Packet Storm

251593	4.3	警告	ClamAV クイックヒール・テクノロジーズ・ジャパン株式会社	-	ClamAV および Quick Heal の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1419	2012-03-26 11:34	2012-03-21	Show	GitHub Exploit DB Packet Storm

251594	4.3	警告	Beijing Rising International Software ESET	-	NOD32 Antivirus および Rising Antivirus の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1449	2012-03-23 18:10	2012-03-21	Show	GitHub Exploit DB Packet Storm

251595	4.3	警告	Beijing Rising International Software Panda Security フォーティネットアラジン	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1445	2012-03-23 18:09	2012-03-21	Show	GitHub Exploit DB Packet Storm

251596	4.3	警告	Beijing Rising International Software Panda Security フォーティネットアラジン	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1439	2012-03-23 18:07	2012-03-21	Show	GitHub Exploit DB Packet Storm

251597	4.3	警告	ウェブルート株式会社アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1441	2012-03-23 18:06	2012-03-21	Show	GitHub Exploit DB Packet Storm

251598	4.3	警告	フォーティネット Panda Security Norman アラジン CA Technologies	-	複数の製品の ELF ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1440	2012-03-23 18:05	2012-03-21	Show	GitHub Exploit DB Packet Storm

251599	4.3	警告	Comodo ソフォス	-	Comodo Antivirus および Sophos Anti-Virus の Microsoft Office ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1438	2012-03-23 18:00	2012-03-21	Show	GitHub Exploit DB Packet Storm

251600	4.3	警告	Comodo	-	複数の製品の Microsoft Office ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1437	2012-03-23 17:55	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195181	9.8	CRITICAL Network	c2fo	comb	All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23561	2024-11-21 14:51	2021-12-11	Show	GitHub Exploit DB Packet Storm

195182	9.1	CRITICAL Network	h2database	h2	The package com.h2database:h2 from 1.4.198 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed string data fr…	CWE-611 XXE	CVE-2021-23463	2024-11-21 14:51	2021-12-11	Show	GitHub Exploit DB Packet Storm

195183	7.2	HIGH Network	bosch	bosch_video_management_system video_recording_manager videojet_decoder_7513_firmware videojet_decoder_8000_firmware	A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BV…	CWE-78 OS Command	CVE-2021-23862	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195184	6.5	MEDIUM Network	bosch	bosch_video_management_system video_recording_manager	By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software.…	NVD-CWE-Other	CVE-2021-23861	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195185	6.1	MEDIUM Network	bosch	bosch_video_management_system video_recording_manager	An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header tha…	CWE-79 Cross-site Scripting	CVE-2021-23860	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195186	7.5	HIGH Network	bosch	bosch_video_management_system video_recording_manager access_easy_controller_firmware video_recording_manager_exporter building_integration_system access_professional_edition	An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to …	CWE-755 Improper Handling of Exceptional Conditions	CVE-2021-23859	2024-11-21 14:51	2021-12-9	Show	GitHub Exploit DB Packet Storm

195187	7.5	HIGH Network	citrix	application_delivery_controller_firmware gateway sd-wan	An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface acce…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-22956	2024-11-21 14:51	2021-12-7	Show	GitHub Exploit DB Packet Storm

195188	7.5	HIGH Network	citrix	application_delivery_controller_firmware gateway	A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to caus…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-22955	2024-11-21 14:51	2021-12-7	Show	GitHub Exploit DB Packet Storm

195189	9.8	CRITICAL Network	ajaxpro.2_project	ajaxpro.2	All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code exec…	CWE-502 Deserialization of Untrusted Data	CVE-2021-23758	2024-11-21 14:51	2021-12-4	Show	GitHub Exploit DB Packet Storm

195190	8.8	HIGH Network	tiny	plupload	This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-23562	2024-11-21 14:51	2021-12-4	Show	GitHub Exploit DB Packet Storm