Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251861 5 警告 LG-Nortel - LG-Nortel ELO GS24M に複数の脆弱性 CWE-287
不適切な認証 		CVE-2012-1838 2012-03-26 16:29 2012-03-22 Show GitHub Exploit DB Packet Storm
251862 7.5 危険 Webglimpse - WebGlimpse に OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2012-1795 2012-03-26 16:24 2012-03-20 Show GitHub Exploit DB Packet Storm
251863 7.5 危険 Pydio - AjaXplorer におけるログインのアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2012-1840 2012-03-26 16:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251864 7.5 危険 Pydio - AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1839 2012-03-26 16:08 2012-03-22 Show GitHub Exploit DB Packet Storm
251865 5 警告 IBM - IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1837 2012-03-26 16:07 2012-03-22 Show GitHub Exploit DB Packet Storm
251866 4.3 警告 IBM - IBM Tivoli Endpoint Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0719 2012-03-26 16:04 2012-03-22 Show GitHub Exploit DB Packet Storm
251867 4.3 警告 ESET
K7 Computing
AVG Technologies
トレンドマイクロ
Ikarus
Norman
ソフォス
マカフィー
Beijing Rising International Software
BitDefender
VirusBlokAda
フォーティネット
カスペルスキー
Emsisoft
Authentium
シマンテック
エフ・セキュア
Jiangmin		 - 複数の製品の Gzip ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1461 2012-03-26 14:35 2012-03-21 Show GitHub Exploit DB Packet Storm
251868 4.3 警告 ESET
トレンドマイクロ
AVG Technologies
マカフィー
Ikarus
Norman
ソフォス
Beijing Rising International Software
Comodo
FRISK Software International
クイックヒール・テクノロジーズ・ジャパン株式会社
アラジン
フォーティネット
Panda Security
カスペルスキー
Emsisoft
シマンテック		 - 複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1456 2012-03-26 14:28 2012-03-21 Show GitHub Exploit DB Packet Storm
251869 4.3 警告 Beijing Rising International Software
ESET		 - NOD32 Antivirus および Rising Antivirus の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1455 2012-03-26 14:26 2012-03-21 Show GitHub Exploit DB Packet Storm
251870 4.3 警告 トレンドマイクロ
Ikarus
Emsisoft
クイックヒール・テクノロジーズ・ジャパン株式会社		 - 複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1448 2012-03-26 14:08 2012-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195271 8.8 HIGH
Network 		fortinet fortiai_firmware An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command. CWE-78
OS Command  		CVE-2021-24023 2024-11-21 14:52 2021-06-4 Show GitHub Exploit DB Packet Storm
195272 4.5 MEDIUM
Adjacent 		mcafee database_security Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted passwor… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-23896 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195273 7.3 HIGH
Network 		fortinet fortios An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted… CWE-295
Improper Certificate Validation  		CVE-2021-24012 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195274 8.0 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on th… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23895 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195275 8.8 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on … CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23894 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
195276 6.1 MEDIUM
Network 		smartdatasoft car_repair_services_\&_auto_mechanic The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cros… - CVE-2021-24335 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195277 5.4 MEDIUM
Network 		connekthq instant_images_-_one_click_unsplash_uploads The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/up… - CVE-2021-24334 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195278 6.5 MEDIUM
Network 		content_copy_protection_\&_prevent_image_save_project content_copy_protection_\&_prevent_image_save The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24333 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195279 4.8 MEDIUM
Network 		smooth_scroll_page_up\/down_buttons_project smooth_scroll_page_up\/down_buttons The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client si… CWE-79
Cross-site Scripting 		CVE-2021-24331 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
195280 4.8 MEDIUM
Network 		cartflows cartflows The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privil… - CVE-2021-24330 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm