Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251741	6.9	警告	マイクロソフト	-	Microsoft Visual Studio における権限昇格の脆弱性	CWE-Other その他	CVE-2012-0008	2012-03-19 15:27	2012-03-13	Show	GitHub Exploit DB Packet Storm

251742	4.3	警告	マイクロソフト	-	Microsoft Windows Server 2008 および Windows 7 の RDP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0152	2012-03-19 15:27	2012-03-13	Show	GitHub Exploit DB Packet Storm

251743	4.3	警告	マイクロソフト	-	複数の Microsoft Windows 製品の DirectWrite におけるサービス運用妨害 (アプリケーションハング) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0156	2012-03-19 15:26	2012-03-13	Show	GitHub Exploit DB Packet Storm

251744	7.2	危険	マイクロソフト	-	複数の Microsoft Windows 製品の win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0157	2012-03-19 15:25	2012-03-13	Show	GitHub Exploit DB Packet Storm

251745	5	警告	マイクロソフト	-	Microsoft Windows Server 2003 および 2008 の DNS サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0006	2012-03-19 15:24	2012-03-13	Show	GitHub Exploit DB Packet Storm

251746	10	危険	ACCESS	-	Android用 NetFront Life Browser アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1485	2012-03-19 14:17	2012-03-15	Show	GitHub Exploit DB Packet Storm

251747	10	危険	WaliSMS	-	Android用 WaliSMS CN アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1484	2012-03-19 14:16	2012-03-15	Show	GitHub Exploit DB Packet Storm

251748	10	危険	Zhou Bo	-	Android用 Message Forwarder アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1483	2012-03-19 14:15	2012-03-15	Show	GitHub Exploit DB Packet Storm

251749	10	危険	CooTek	-	Android 用 TouchPal Contacts アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1482	2012-03-19 14:09	2012-03-15	Show	GitHub Exploit DB Packet Storm

251750	10	危険	Kashif Masud	-	Android 用 Textdroid アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1481	2012-03-19 14:06	2012-03-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195511	9.8	CRITICAL Network	microfocus	operations_bridge_manager	Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user auth…	CWE-287 Improper Authentication	CVE-2021-22507	2024-11-21 14:50	2021-04-9	Show	GitHub Exploit DB Packet Storm

195512	6.5	MEDIUM Network	github	enterprise_server	An improper access control vulnerability was identified in GitHub Enterprise Server that allowed access tokens generated from a GitHub App's web authentication flow to read private repository metadat…	NVD-CWE-Other	CVE-2021-22865	2024-11-21 14:50	2021-04-3	Show	GitHub Exploit DB Packet Storm

195513	7.5	HIGH Network	apache oracle	cxf business_intelligence communications_session_route_manager communications_session_report_manager communications_element_manager communications_diameter_intelligence_hub	CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR))…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-22696	2024-11-21 14:50	2021-04-2	Show	GitHub Exploit DB Packet Storm

195514	3.7	LOW Network	haxx fedoraproject netapp broadcom debian siemens oracle splunk	libcurl fedora solidfire hci_management_node hci_storage_node fabric_operating_system debian_linux sinec_infrastructure_network_services communications_billing_and_revenue_man…	curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.…	CWE-290 Authentication Bypass by Spoofing	CVE-2021-22890	2024-11-21 14:50	2021-04-2	Show	GitHub Exploit DB Packet Storm

195515	5.3	MEDIUM Network	haxx fedoraproject netapp broadcom debian siemens oracle splunk	libcurl fedora solidfire hci_management_node hci_storage_node hci_compute_node fabric_operating_system debian_linux sinec_infrastructure_network_services communications_bil…	curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip o…	CWE-200 Information Exposure	CVE-2021-22876	2024-11-21 14:50	2021-04-2	Show	GitHub Exploit DB Packet Storm

195516	8.8	HIGH Network	google	exposure_notifications_verification_server	A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0.23.1), allows an attacker who (1) has UserWrite permissions and (2) is using a…	CWE-276 Incorrect Default Permissions	CVE-2021-22538	2024-11-21 14:50	2021-04-1	Show	GitHub Exploit DB Packet Storm

195517	6.1	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message.…	CWE-79 Cross-site Scripting	CVE-2021-22886	2024-11-21 14:50	2021-03-27	Show	GitHub Exploit DB Packet Storm

195518	7.5	HIGH Network	microfocus	access_manager	Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.	NVD-CWE-noinfo	CVE-2021-22506	2024-11-21 14:50	2021-03-26	Show	GitHub Exploit DB Packet Storm

195519	6.1	MEDIUM Network	revive-adserver	revive_adserver	Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly other scripts) due to single quotes not being escaped. An att…	CWE-79 Cross-site Scripting	CVE-2021-22889	2024-11-21 14:50	2021-03-26	Show	GitHub Exploit DB Packet Storm

195520	6.1	MEDIUM Network	revive-adserver	revive_adserver	Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones.php. An attacker could trick a user with access to the user interface of …	CWE-79 Cross-site Scripting	CVE-2021-22888	2024-11-21 14:50	2021-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed