Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252241 4.3 警告 e107.org - e107 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4920 2012-01-6 15:28 2012-01-4 Show GitHub Exploit DB Packet Storm
252242 4.3 警告 IBM - IBM TFIM および TFIMBG における意図された認証または認証要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1386 2012-01-6 15:26 2011-12-13 Show GitHub Exploit DB Packet Storm
252243 4 警告 IBM - IBM AIX 上の invscout.rte における任意のファイルを削除される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-1384 2012-01-6 15:24 2011-12-2 Show GitHub Exploit DB Packet Storm
252244 4.3 警告 IBM - IBM Web Experience Factory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5048 2012-01-6 15:23 2012-01-3 Show GitHub Exploit DB Packet Storm
252245 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5047 2012-01-6 15:22 2012-01-3 Show GitHub Exploit DB Packet Storm
252246 7.5 危険 Electric Sheep Fencing - pfSense における証明書を作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4197 2012-01-6 15:21 2011-12-20 Show GitHub Exploit DB Packet Storm
252247 4.3 警告 Splunk - Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4778 2012-01-5 16:29 2011-12-12 Show GitHub Exploit DB Packet Storm
252248 9.3 危険 Splunk - Splunk における任意のファイルを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2011-4644 2012-01-5 16:28 2012-01-3 Show GitHub Exploit DB Packet Storm
252249 4 警告 Splunk - Splunk におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4643 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
252250 4.6 警告 Splunk - Splunk の Splunk Web 内にある mappy.py における任意のコードを実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4642 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195571 8.2 HIGH
Network 		matrix
fedoraproject 		synapse
fedora 		Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the p… CWE-79
Cross-site Scripting 		CVE-2021-21332 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
195572 9.8 CRITICAL
Network 		kongchuanhujiao_project kongchuanhujiao In github.com/kongchuanhujiao/server before version 1.3.21 there is an authentication Bypass by Primary Weakness vulnerability. All users are impacted. This is fixed in version 1.3.21. CWE-287
Improper Authentication 		CVE-2021-21403 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
195573 9.8 CRITICAL
Network 		genivia
oracle 		gsoap
communications_lsms
communications_diameter_signaling_router
tekelec_virtual_operating_environment
communications_eagle_lnp_application_processor
communications_eagle_application… 		A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an H… CWE-190
 Integer Overflow or Wraparound 		CVE-2021-21783 2024-11-21 14:48 2021-03-26 Show GitHub Exploit DB Packet Storm
195574 9.8 CRITICAL
Network 		apkleaks_project apkleaks APKLeaks is an open-source project for scanning APK file for URIs, endpoints & secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside appli… - CVE-2021-21386 2024-11-21 14:48 2021-03-25 Show GitHub Exploit DB Packet Storm
195575 7.4 HIGH
Network 		mifos mifos-mobile Mifos-Mobile Android Application for MifosX is an Android Application built on top of the MifosX Self-Service platform. Mifos-Mobile before commit e505f62 disables HTTPS hostname verification of its … - CVE-2021-21385 2024-11-21 14:48 2021-03-25 Show GitHub Exploit DB Packet Storm
195576 8.8 HIGH
Network 		xwiki xwiki XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform (and only those with the Ratings API installed), the Ra… CWE-89
SQL Injection 		CVE-2021-21380 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
195577 6.5 MEDIUM
Network 		jellyfin jellyfin Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This is… - CVE-2021-21402 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
195578 7.1 HIGH
Network 		nanopb_project nanopb Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` ca… - CVE-2021-21401 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
195579 5.4 MEDIUM
Network 		openmicroscopy omero.web OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a given URL after performing login or switching the group contex… - CVE-2021-21377 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm
195580 6.5 MEDIUM
Network 		openmicroscopy omero.web OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups t… - CVE-2021-21376 2024-11-21 14:48 2021-03-24 Show GitHub Exploit DB Packet Storm