Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253471 5 警告 Puppet - Puppet Labs の Puppet におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3848 2011-11-4 15:00 2011-09-28 Show GitHub Exploit DB Packet Storm
253472 4.3 警告 アップル - WebObjects におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3998 2011-11-4 14:03 2011-11-4 Show GitHub Exploit DB Packet Storm
253473 6.4 警告 Opengear - 複数の Opengear 製品における認証回避の脆弱性 CWE-287
不適切な認証 		CVE-2011-3997 2011-11-4 14:02 2011-11-4 Show GitHub Exploit DB Packet Storm
253474 9.3 危険 アップル - Windows 上で稼動する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-3251 2011-11-4 11:52 2011-10-26 Show GitHub Exploit DB Packet Storm
253475 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3250 2011-11-4 11:38 2011-10-28 Show GitHub Exploit DB Packet Storm
253476 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3249 2011-11-4 11:38 2011-10-28 Show GitHub Exploit DB Packet Storm
253477 9.3 危険 アップル - Apple QuickTime における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3248 2011-11-4 11:37 2011-10-28 Show GitHub Exploit DB Packet Storm
253478 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3247 2011-11-4 11:36 2011-10-28 Show GitHub Exploit DB Packet Storm
253479 4.3 警告 IBM - IBM WebSphere ILOG Rule Team Server の content/error.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1371 2011-11-4 11:36 2011-10-11 Show GitHub Exploit DB Packet Storm
253480 4.3 警告 IBM - IBM HTTP Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1360 2011-11-4 11:35 2011-08-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195191 9.1 CRITICAL
Network 		craftercms crafter_cms Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-23264 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
195192 7.5 HIGH
Network 		craftercms crafter_cms Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/*, /templates/* and some of the files in /.git/* (non-binary). CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-23263 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
195193 7.2 HIGH
Network 		craftercms crafter_cms Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE. CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2021-23262 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
195194 4.9 MEDIUM
Network 		craftercms crafter_cms Authenticated administrators may override the system configuration file and cause a denial of service. NVD-CWE-Other
CVE-2021-23261 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
195195 5.4 MEDIUM
Network 		craftercms crafter_cms Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site. CWE-79
Cross-site Scripting 		CVE-2021-23260 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
195196 7.2 HIGH
Network 		craftercms crafter_cms Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, wh… CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2021-23259 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
195197 7.2 HIGH
Network 		craftercms crafter_cms Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers t… CWE-913
 Improper Control of Dynamically-Managed Code Resources 		CVE-2021-23258 2024-11-21 14:51 2021-12-3 Show GitHub Exploit DB Packet Storm
195198 9.8 CRITICAL
Network 		html-to-csv_project html-to-csv This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV … CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2021-23654 2024-11-21 14:51 2021-11-27 Show GitHub Exploit DB Packet Storm
195199 8.8 HIGH
Network 		ui unifi_protect A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with ma… NVD-CWE-noinfo
CVE-2021-22957 2024-11-21 14:51 2021-11-25 Show GitHub Exploit DB Packet Storm
195200 9.0 CRITICAL
Network 		quobject docker-cli-js This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arb… CWE-78
OS Command  		CVE-2021-23732 2024-11-21 14:51 2021-11-23 Show GitHub Exploit DB Packet Storm