Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252831	7.2	危険	マイクロソフト	-	複数の Microsoft Windows のカーネルにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2018	2011-12-16 11:49	2011-12-13	Show	GitHub Exploit DB Packet Storm

252832	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer 8 の XSS フィルタにおけるコンテンツを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1992	2011-12-16 11:48	2011-12-13	Show	GitHub Exploit DB Packet Storm

252833	9.3	危険	マイクロソフト	-	Microsoft Excel および Office における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3403	2011-12-16 11:40	2011-12-13	Show	GitHub Exploit DB Packet Storm

252834	9	危険	マイクロソフト	-	Microsoft Windows におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3406	2011-12-16 11:38	2011-12-13	Show	GitHub Exploit DB Packet Storm

252835	9.3	危険	マイクロソフト	-	複数の Microsoft PowerPoint 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3413	2011-12-16 11:37	2011-12-13	Show	GitHub Exploit DB Packet Storm

252836	9.3	危険	マイクロソフト	-	Microsoft PowerPoint 2007 および 2010 における権限昇格の脆弱性	CWE-Other その他	CVE-2011-3396	2011-12-16 11:36	2011-12-13	Show	GitHub Exploit DB Packet Storm

252837	9.3	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3400	2011-12-16 11:35	2011-12-13	Show	GitHub Exploit DB Packet Storm

252838	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品の ENCDEC.DLL における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3401	2011-12-16 11:34	2011-12-13	Show	GitHub Exploit DB Packet Storm

252839	9.3	危険	マイクロソフト	-	Microsoft Publisher における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3412	2011-12-16 11:32	2011-12-13	Show	GitHub Exploit DB Packet Storm

252840	9.3	危険	マイクロソフト	-	Microsoft Publisher における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3411	2011-12-16 11:31	2011-12-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195381	7.0	HIGH Local	linux debian netapp	linux_kernel debian_linux h410c_firmware h300s_firmware h500s_firmware h700s_firmware h410s_firmware	A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past t…	CWE-415 Double Free	CVE-2021-22600	2024-11-21 14:50	2022-01-26	Show	GitHub Exploit DB Packet Storm

195382	5.5	MEDIUM Local	google debian fedoraproject oracle netapp	protobuf debian_linux fedora mysql snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager	Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error m…	CWE-476 NULL Pointer Dereference	CVE-2021-22570	2024-11-21 14:50	2022-01-26	Show	GitHub Exploit DB Packet Storm

195383	9.8	CRITICAL Network	google	fuchsia	An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to b…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-22566	2024-11-21 14:50	2022-01-18	Show	GitHub Exploit DB Packet Storm

195384	5.5	MEDIUM Local	google oracle	protobuf-kotlin protobuf-java google-protobuf communications_cloud_native_core_console communications_cloud_native_core_policy communications_cloud_native_core_network_repository_funct…	An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser fo…	NVD-CWE-noinfo	CVE-2021-22569	2024-11-21 14:50	2022-01-10	Show	GitHub Exploit DB Packet Storm

195385	3.5	LOW Network	dart	dart_software_development_kit	Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacke…	NVD-CWE-Other	CVE-2021-22567	2024-11-21 14:50	2022-01-5	Show	GitHub Exploit DB Packet Storm

195386	9.8	CRITICAL Network	myscada	mypro	mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.	-	CVE-2021-22657	2024-11-21 14:50	2021-12-24	Show	GitHub Exploit DB Packet Storm

195387	8.8	HIGH Network	dart	dart_software_development_kit	When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. U…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2021-22568	2024-11-21 14:50	2021-12-10	Show	GitHub Exploit DB Packet Storm

195388	6.5	MEDIUM Network	google	exposure_notification_verification_server	An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading …	NVD-CWE-Other	CVE-2021-22565	2024-11-21 14:50	2021-12-9	Show	GitHub Exploit DB Packet Storm

195389	5.4	MEDIUM Network	huawei	imaster_nce-fabric_firmware	There is a XSS injection vulnerability in iMaster NCE-Fabric V100R019C10. A module of the client does not verify the input sufficiently. Attackers can exploit this vulnerability by modifying input af…	CWE-79 Cross-site Scripting	CVE-2021-22410	2024-11-21 14:50	2021-11-24	Show	GitHub Exploit DB Packet Storm

195390	6.5	MEDIUM Network	github	enterprise_server	A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit this vulnerability, an attacker would ne…	CWE-22 Path Traversal	CVE-2021-22870	2024-11-21 14:50	2021-11-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed