Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253301 7.5 危険 Google - Google Chrome における詳細不明な脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1123 2011-11-17 10:23 2011-02-28 Show GitHub Exploit DB Packet Storm
253302 5 警告 Google - Google Chrome の WebGL 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1122 2011-11-17 10:23 2011-02-28 Show GitHub Exploit DB Packet Storm
253303 5 警告 Google - Google Chrome の WebGL 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1120 2011-11-17 10:21 2011-02-28 Show GitHub Exploit DB Packet Storm
253304 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1119 2011-11-17 10:20 2011-02-28 Show GitHub Exploit DB Packet Storm
253305 6.8 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1118 2011-11-17 10:19 2011-02-28 Show GitHub Exploit DB Packet Storm
253306 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1116 2011-11-17 10:18 2011-02-28 Show GitHub Exploit DB Packet Storm
253307 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-DesignError
CVE-2011-1113 2011-11-17 10:17 2011-02-28 Show GitHub Exploit DB Packet Storm
253308 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1112 2011-11-17 10:16 2011-02-28 Show GitHub Exploit DB Packet Storm
253309 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1111 2011-11-17 10:15 2011-02-28 Show GitHub Exploit DB Packet Storm
253310 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1110 2011-11-17 10:14 2011-02-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195131 8.8 HIGH
Network 		nodemailer nodemailer The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object. CWE-74
Injection 		CVE-2021-23400 2024-11-21 14:51 2021-06-29 Show GitHub Exploit DB Packet Storm
195132 9.8 CRITICAL
Network 		wincred_project wincred This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to us… CWE-78
OS Command  		CVE-2021-23399 2024-11-21 14:51 2021-06-28 Show GitHub Exploit DB Packet Storm
195133 6.1 MEDIUM
Network 		react-bootstrap-table_project react-bootstrap-table All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting (XSS) via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to… CWE-79
Cross-site Scripting 		CVE-2021-23398 2024-11-21 14:51 2021-06-25 Show GitHub Exploit DB Packet Storm
195134 5.9 MEDIUM
Network 		bosch b426_firmware When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Fir… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-23846 2024-11-21 14:51 2021-06-18 Show GitHub Exploit DB Packet Storm
195135 8.8 HIGH
Network 		bosch b426_firmware
b426-cn_firmware
b429-cn_firmware
b426-m_firmware 		This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found durin… NVD-CWE-noinfo
CVE-2021-23845 2024-11-21 14:51 2021-06-18 Show GitHub Exploit DB Packet Storm
195136 9.8 CRITICAL
Network 		lutils_project lutils All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23396 2024-11-21 14:51 2021-06-18 Show GitHub Exploit DB Packet Storm
195137 5.3 MEDIUM
Network 		nedb_project nedb This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23395 2024-11-21 14:51 2021-06-16 Show GitHub Exploit DB Packet Storm
195138 9.8 CRITICAL
Network 		std42 elfinder The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-23394 2024-11-21 14:51 2021-06-13 Show GitHub Exploit DB Packet Storm
195139 4.3 MEDIUM
Network 		gallagher command_centre A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects… CWE-89
SQL Injection 		CVE-2021-23230 2024-11-21 14:51 2021-06-12 Show GitHub Exploit DB Packet Storm
195140 4.4 MEDIUM
Local 		gallagher command_centre Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key to be discoverable in server memory dumps. This issue affe… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2021-23211 2024-11-21 14:51 2021-06-12 Show GitHub Exploit DB Packet Storm