Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252901 4 警告 Vtiger - vtiger CRM におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4679 2011-12-12 11:39 2011-12-7 Show GitHub Exploit DB Packet Storm
252902 5 警告 Novell - Novell Messenger および Novell GroupWise Messenger における任意のメモリ配置を読み取られる脆弱性 CWE-200
情報漏えい 		CVE-2011-3179 2011-12-12 11:37 2011-10-25 Show GitHub Exploit DB Packet Storm
252903 10 危険 Novell - Novell ZENworks Asset Management の rtrlet コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2653 2011-12-12 11:36 2011-11-2 Show GitHub Exploit DB Packet Storm
252904 7.8 危険 日立 - JP1/Cm2/Network Node Manager i におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2011-12-9 16:35 2011-10-12 Show GitHub Exploit DB Packet Storm
252905 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (CPU およびメモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4687 2011-12-9 16:07 2011-12-7 Show GitHub Exploit DB Packet Storm
252906 5 警告 Opera Software ASA - Opera の Web Workers 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-4686 2011-12-9 16:06 2011-12-7 Show GitHub Exploit DB Packet Storm
252907 5 警告 Opera Software ASA - Opera の Dragonfly におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4685 2011-12-9 16:05 2011-12-7 Show GitHub Exploit DB Packet Storm
252908 10 危険 Opera Software ASA - Opera における証明書失効の処理に関する詳細不明な脆弱性 CWE-310
暗号の問題 		CVE-2011-4684 2011-12-9 16:05 2011-12-7 Show GitHub Exploit DB Packet Storm
252909 10 危険 Opera Software ASA - Opera における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2011-4683 2011-12-9 16:04 2011-12-7 Show GitHub Exploit DB Packet Storm
252910 6.4 警告 Opera Software ASA - Opera の JavaScript エンジンにおける同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4682 2011-12-9 16:03 2011-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195331 6.1 MEDIUM
Network 		schneider-electric network_management_card_2_firmware
network_management_card_3_firmware 		A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a … CWE-79
Cross-site Scripting 		CVE-2021-22813 2024-11-21 14:50 2022-01-29 Show GitHub Exploit DB Packet Storm
195332 6.1 MEDIUM
Network 		schneider-electric network_management_card_2_firmware
network_management_card_3_firmware 		A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a … CWE-79
Cross-site Scripting 		CVE-2021-22812 2024-11-21 14:50 2022-01-29 Show GitHub Exploit DB Packet Storm
195333 6.1 MEDIUM
Network 		schneider-electric network_management_card_2_firmware
network_management_card_3_firmware 		A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessin… CWE-79
Cross-site Scripting 		CVE-2021-22811 2024-11-21 14:50 2022-01-29 Show GitHub Exploit DB Packet Storm
195334 6.1 MEDIUM
Network 		schneider-electric network_management_card_2_firmware
network_management_card_3_firmware 		A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a … CWE-79
Cross-site Scripting 		CVE-2021-22810 2024-11-21 14:50 2022-01-29 Show GitHub Exploit DB Packet Storm
195335 7.0 HIGH
Local 		linux
debian
netapp 		linux_kernel
debian_linux
h410c_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h410s_firmware 		A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past t… CWE-415
 Double Free 		CVE-2021-22600 2024-11-21 14:50 2022-01-26 Show GitHub Exploit DB Packet Storm
195336 5.5 MEDIUM
Local 		google
debian
fedoraproject
oracle
netapp 		protobuf
debian_linux
fedora
mysql
snapcenter
oncommand_workflow_automation
oncommand_insight
active_iq_unified_manager 		Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error m… CWE-476
 NULL Pointer Dereference 		CVE-2021-22570 2024-11-21 14:50 2022-01-26 Show GitHub Exploit DB Packet Storm
195337 9.8 CRITICAL
Network 		google fuchsia An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to b… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2021-22566 2024-11-21 14:50 2022-01-18 Show GitHub Exploit DB Packet Storm
195338 5.5 MEDIUM
Local 		google
oracle 		protobuf-kotlin
protobuf-java
google-protobuf
communications_cloud_native_core_console
communications_cloud_native_core_policy
communications_cloud_native_core_network_repository_funct… 		An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser fo… NVD-CWE-noinfo
CVE-2021-22569 2024-11-21 14:50 2022-01-10 Show GitHub Exploit DB Packet Storm
195339 3.5 LOW
Network 		dart dart_software_development_kit Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacke… NVD-CWE-Other
CVE-2021-22567 2024-11-21 14:50 2022-01-5 Show GitHub Exploit DB Packet Storm
195340 9.8 CRITICAL
Network 		myscada mypro mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter. - CVE-2021-22657 2024-11-21 14:50 2021-12-24 Show GitHub Exploit DB Packet Storm