Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253171 4.9 警告 KVM - KVM の arch/x86/kvm/i8254.c におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-noinfo
情報不足
CVE-2011-4622 2012-02-1 16:28 2012-01-27 Show GitHub Exploit DB Packet Storm
253172 7.5 危険 レッドハット - Red Hat Linux 用の JBoss Enterprise Application Platform におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4608 2012-02-1 16:27 2012-01-18 Show GitHub Exploit DB Packet Storm
253173 5.8 警告 Kay Framework
OpenID
レッドハット
- OpenID4Java の message/ax/AxMessage.java における AX 情報を変更される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4314 2012-02-1 16:26 2011-05-5 Show GitHub Exploit DB Packet Storm
253174 9.3 危険 Google - Android におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3874 2012-02-1 16:24 2011-11-9 Show GitHub Exploit DB Packet Storm
253175 7.5 危険 Kerry Thompson
drusus
- Logsurfer および Logsurfer+ におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3626 2012-02-1 16:24 2012-01-27 Show GitHub Exploit DB Packet Storm
253176 5 警告 The Support Incident Tracker Project - Support Incident Tracker の translate.php における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-5075 2012-02-1 16:20 2011-11-13 Show GitHub Exploit DB Packet Storm
253177 6.8 警告 The Support Incident Tracker Project - Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5074 2012-02-1 16:18 2012-01-29 Show GitHub Exploit DB Packet Storm
253178 5.8 警告 The Support Incident Tracker Project - Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5073 2012-02-1 16:18 2012-01-29 Show GitHub Exploit DB Packet Storm
253179 7.5 危険 The Support Incident Tracker Project - Support Incident Tracker における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-5072 2012-02-1 16:17 2012-01-29 Show GitHub Exploit DB Packet Storm
253180 7.5 危険 The Support Incident Tracker Project - Support Incident Tracker における任意の PHP コードを実行可能な言語ファイルに挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2011-4337 2012-02-1 16:17 2011-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194791 7.5 HIGH
Network
digium certified_asterisk
asterisk
An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6. When re-negotiating for T.38, if the initial remo… NVD-CWE-noinfo
CVE-2021-26717 2024-11-21 14:56 2021-02-19 Show GitHub Exploit DB Packet Storm
194792 7.8 HIGH
Local
avahi
debian
avahi
debian_linux
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbit… CWE-59
Link Following
CVE-2021-26720 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194793 9.8 CRITICAL
Network
phpgurukul car_rental_portal PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2021-26809 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194794 5.3 MEDIUM
Network
apache airflow The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as th… CWE-306
Missing Authentication for Critical Function
CVE-2021-26697 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194795 6.5 MEDIUM
Network
apache airflow Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `… NVD-CWE-Other
CVE-2021-26559 2024-11-21 14:56 2021-02-18 Show GitHub Exploit DB Packet Storm
194796 9.8 CRITICAL
Network
phpgurukul teachers_record_management_system Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthentic… CWE-89
SQL Injection
CVE-2021-26822 2024-11-21 14:56 2021-02-16 Show GitHub Exploit DB Packet Storm
194797 9.9 CRITICAL
Network
nedi nedi NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP POST parameter. This allows an attacker to obtain access to t… CWE-863
 Incorrect Authorization
CVE-2021-26753 2024-11-21 14:56 2021-02-13 Show GitHub Exploit DB Packet Storm
194798 8.8 HIGH
Network
nedi nedi NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag HTTP GET parameter. This allows an attack… CWE-78
OS Command 
CVE-2021-26752 2024-11-21 14:56 2021-02-13 Show GitHub Exploit DB Packet Storm
194799 8.8 HIGH
Network
nedi nedi NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to… CWE-89
SQL Injection
CVE-2021-26751 2024-11-21 14:56 2021-02-13 Show GitHub Exploit DB Packet Storm
194800 8.8 HIGH
Network
smartfoxserver smartfoxserver An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and edit… CWE-94
Code Injection
CVE-2021-26551 2024-11-21 14:56 2021-02-10 Show GitHub Exploit DB Packet Storm