Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253191	10	危険	Schneider Electric	-	NOE 771 デバイス上の Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2011-4860	2011-12-21 15:29	2011-12-12	Show	GitHub Exploit DB Packet Storm

253192	10	危険	Schneider Electric	-	Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性	CWE-DesignError	CVE-2011-4859	2011-12-21 15:28	2011-12-12	Show	GitHub Exploit DB Packet Storm

253193	10	危険	Nullsoft	-	Winamp の in_mod.dll プラグインにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4857	2011-12-21 15:27	2011-12-9	Show	GitHub Exploit DB Packet Storm

253194	6.8	警告	HomeSeer Technologies, LLC.	-	HomeSeer HS2 の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4837	2011-12-21 15:25	2011-12-15	Show	GitHub Exploit DB Packet Storm

253195	4.3	警告	HomeSeer Technologies, LLC.	-	HomeSeer HS2 の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4836	2011-12-21 15:24	2011-12-15	Show	GitHub Exploit DB Packet Storm

253196	7.5	危険	HomeSeer Technologies, LLC.	-	HomeSeer HS2 の Web インターフェースにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4835	2011-12-21 15:23	2011-12-15	Show	GitHub Exploit DB Packet Storm

253197	9.3	危険	RSAセキュリティ	-	EMC RSA SecurID Software Token における権限を取得される脆弱性	CWE-Other その他	CVE-2011-4141	2011-12-21 14:34	2011-12-17	Show	GitHub Exploit DB Packet Storm

253198	4.3	警告	Mozilla Foundation SafeNet, Inc 7-Technologies	-	複数の SafeNet 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3339	2011-12-21 14:21	2011-12-12	Show	GitHub Exploit DB Packet Storm

253199	6.8	警告	奈良先端科学技術大学院大学	-	茶筌 (ChaSen) におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4000	2011-12-20 18:12	2011-11-8	Show	GitHub Exploit DB Packet Storm

253200	8.3	危険	富士通日本電気日立	-	Preboot Execution Environment (PXE) SDK を使用した製品における複数の脆弱性	CWE-119 CWE-22	CVE-2009-0270	2011-12-20 17:33	2011-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194921	5.3	MEDIUM Network	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS.	NVD-CWE-noinfo	CVE-2021-25756	2024-11-21 14:55	2021-02-4	Show	GitHub Exploit DB Packet Storm

194922	2.5	LOW Local	jetbrains	code_with_me	In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic.	NVD-CWE-Other	CVE-2021-25755	2024-11-21 14:55	2021-02-4	Show	GitHub Exploit DB Packet Storm

194923	9.8	CRITICAL Network	dotty_project	dotty	Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-25912	2024-11-21 14:55	2021-02-3	Show	GitHub Exploit DB Packet Storm

194924	8.8	HIGH Network	apache	druid	Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by…	NVD-CWE-noinfo	CVE-2021-25646	2024-11-21 14:55	2021-01-30	Show	GitHub Exploit DB Packet Storm

194925	6.5	MEDIUM Adjacent	zivautomation	4cct-ea6-334126bf_firmware	Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an a…	CWE-287 Improper Authentication	CVE-2021-25910	2024-11-21 14:55	2021-01-29	Show	GitHub Exploit DB Packet Storm

194926	7.5	HIGH Network	zivautomation	4cct-ea6-334126bf_firmware	ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vul…	CWE-400 Uncontrolled Resource Consumption	CVE-2021-25909	2024-11-21 14:55	2021-01-29	Show	GitHub Exploit DB Packet Storm

194927	5.4	MEDIUM Network	testes-codigo	testes_de_codigo	Mobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in the "feedback" message field causing it to be stored in the remote database and leading to its execut…	CWE-79 Cross-site Scripting	CVE-2021-25647	2024-11-21 14:55	2021-01-29	Show	GitHub Exploit DB Packet Storm

194928	5.3	MEDIUM Network	atlassian	bamboo	Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp dir…	CWE-200 Information Exposure	CVE-2021-26067	2024-11-21 14:55	2021-01-28	Show	GitHub Exploit DB Packet Storm

194929	7.5	HIGH Network	apache netapp	activemq_artemis oncommand_workflow_automation	While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entir…	NVD-CWE-Other	CVE-2021-26118	2024-11-21 14:55	2021-01-28	Show	GitHub Exploit DB Packet Storm

194930	7.5	HIGH Network	apache netapp debian oracle	activemq activemq_artemis oncommand_workflow_automation debian_linux flexcube_private_banking communications_session_report_manager communications_element_manager communications_…	The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to ve…	CWE-287 Improper Authentication	CVE-2021-26117	2024-11-21 14:55	2021-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed