Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253641	6.8	警告	アップル	-	Mac OS X 上で動作する Apple Safari における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3230	2011-10-25 16:35	2011-10-14	Show	GitHub Exploit DB Packet Storm

253642	6.8	警告	アップル	-	Apple Safari におけるディレクトリトラバーサルの脆弱性	CWE-22 CWE-94	CVE-2011-3229	2011-10-25 16:34	2011-10-14	Show	GitHub Exploit DB Packet Storm

253643	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services (ATS) における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3437	2011-10-25 16:33	2011-10-14	Show	GitHub Exploit DB Packet Storm

253644	6.5	警告	アップル	-	Apple Mac OS の Open Directory におけるパスワード変更の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3436	2011-10-25 16:32	2011-10-14	Show	GitHub Exploit DB Packet Storm

253645	10	危険	ヒューレット・パッカード	-	HP Data Protector における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-3156	2011-10-25 14:34	2011-10-18	Show	GitHub Exploit DB Packet Storm

253646	4.3	警告	KENT-WEB	-	WEB FORUM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3984	2011-10-25 13:44	2011-10-11	Show	GitHub Exploit DB Packet Storm

253647	2.6	注意	KENT-WEB	-	WEB FORUM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3983	2011-10-25 13:43	2011-10-11	Show	GitHub Exploit DB Packet Storm

253648	5	警告	KENT-WEB	-	WEB FORUM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3383	2011-10-25 13:43	2011-10-11	Show	GitHub Exploit DB Packet Storm

253649	6.8	警告	アップル	-	Apple Mac OS X の MediaKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-3217	2011-10-25 11:50	2011-10-14	Show	GitHub Exploit DB Packet Storm

253650	2.1	注意	アップル	-	Apple Mac OS X の kernel におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3216	2011-10-25 11:49	2011-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195161	5.5	MEDIUM Local	f5	nginx_controller	The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.	CWE-330 Use of Insufficiently Random Values	CVE-2021-23020	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195162	7.8	HIGH Local	f5	nginx_controller	The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.	CWE-522 Insufficiently Protected Credentials	CVE-2021-23019	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195163	7.7	HIGH Network	f5 openresty fedoraproject netapp oracle	nginx openresty fedora ontap_select_deploy_administration_utility communications_operations_monitor enterprise_session_border_controller communications_session_border_controller …	A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process cra…	-	CVE-2021-23017	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195164	7.4	HIGH Network	f5	nginx_controller	Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2021-23018	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195165	6.1	MEDIUM Network	trailing-slash_project	trailing-slash	The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker…	CWE-601 Open Redirect	CVE-2021-23387	2024-11-21 14:51	2021-05-25	Show	GitHub Exploit DB Packet Storm

195166	6.5	MEDIUM Network	dns-packet_project	dns-packet	This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over un…	CWE-909 Missing Initialization of Resource	CVE-2021-23386	2024-11-21 14:51	2021-05-21	Show	GitHub Exploit DB Packet Storm

195167	5.4	MEDIUM Network	koa-remove-trailing-slashes_project	koa-remove-trailing-slashes	The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.…	CWE-601 Open Redirect	CVE-2021-23384	2024-11-21 14:51	2021-05-18	Show	GitHub Exploit DB Packet Storm

195168	5.5	MEDIUM Local	argoproj	argo_cd	Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo C…	CWE-209 Information Exposure Through an Error Message	CVE-2021-23135	2024-11-21 14:51	2021-05-13	Show	GitHub Exploit DB Packet Storm

195169	7.8	HIGH Local	linux fedoraproject debian	linux_kernel fedora debian_linux	Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privi…	CWE-416 Use After Free	CVE-2021-23134	2024-11-21 14:51	2021-05-13	Show	GitHub Exploit DB Packet Storm

195170	7.8	HIGH Local	mcafee	total_protection	Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the …	CWE-59 Link Following	CVE-2021-23872	2024-11-21 14:51	2021-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed