Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253821 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0601 2012-03-21 15:24 2012-03-8 Show GitHub Exploit DB Packet Storm
253822 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0600 2012-03-21 15:23 2012-03-8 Show GitHub Exploit DB Packet Storm
253823 6.8 警告 アップル
Google		 - 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2877 2012-03-21 15:22 2011-10-4 Show GitHub Exploit DB Packet Storm
253824 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2873 2012-03-21 15:02 2012-03-8 Show GitHub Exploit DB Packet Storm
253825 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2872 2012-03-21 15:01 2012-03-8 Show GitHub Exploit DB Packet Storm
253826 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2871 2012-03-21 14:59 2012-03-8 Show GitHub Exploit DB Packet Storm
253827 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-2870 2012-03-21 14:58 2012-03-8 Show GitHub Exploit DB Packet Storm
253828 7.6 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0648 2012-03-21 14:52 2012-03-8 Show GitHub Exploit DB Packet Storm
253829 7.6 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0639 2012-03-21 14:51 2012-03-8 Show GitHub Exploit DB Packet Storm
253830 7.6 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0638 2012-03-21 14:49 2012-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194751 8.8 HIGH
Network 		ibm websphere_application_server IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 2020… NVD-CWE-noinfo
CVE-2021-29754 2024-11-21 15:01 2021-06-12 Show GitHub Exploit DB Packet Storm
194752 7.4 HIGH
Network 		wp-cli wp-cli WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communicat… - CVE-2021-29504 2024-11-21 15:01 2021-06-8 Show GitHub Exploit DB Packet Storm
194753 7.5 HIGH
Network 		bubble_fireworks_project bubble_fireworks bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly ver… - CVE-2021-29500 2024-11-21 15:01 2021-06-5 Show GitHub Exploit DB Packet Storm
194754 5.4 MEDIUM
Network 		ibm rational_doors_next_generation
rational_quality_manager
collaborative_lifecycle_management
engineering_test_management
rational_engineering_lifecycle_manager
engineering_lifecycle_mana… 		IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu… CWE-79
Cross-site Scripting 		CVE-2021-29670 2024-11-21 15:01 2021-06-3 Show GitHub Exploit DB Packet Storm
194755 5.4 MEDIUM
Network 		ibm rational_doors_next_generation
rational_quality_manager
collaborative_lifecycle_management
engineering_test_management
rational_engineering_lifecycle_manager
engineering_lifecycle_mana… 		IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu… CWE-79
Cross-site Scripting 		CVE-2021-29668 2024-11-21 15:01 2021-06-3 Show GitHub Exploit DB Packet Storm
194756 7.8 HIGH
Local 		ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context… CWE-134
Use of Externally-Controlled Format String 		CVE-2021-29740 2024-11-21 15:01 2021-06-1 Show GitHub Exploit DB Packet Storm
194757 7.8 HIGH
Local 		ibm security_verify_access IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with ele… CWE-787
 Out-of-bounds Write 		CVE-2021-29665 2024-11-21 15:01 2021-06-1 Show GitHub Exploit DB Packet Storm
194758 6.5 MEDIUM
Network 		genivi diagnostic_log_and_trace GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vul… NVD-CWE-noinfo
CVE-2021-29507 2024-11-21 15:01 2021-05-29 Show GitHub Exploit DB Packet Storm
194759 8.8 HIGH
Network 		xstream_project
debian
fedoraproject
netapp
oracle 		xstream
debian_linux
fedora
snapmanager
webcenter_portal
webcenter_sites
communications_unified_inventory_management
enterprise_manager_ops_center
banking_credit_facilities_pr… 		XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of th… - CVE-2021-29505 2024-11-21 15:01 2021-05-29 Show GitHub Exploit DB Packet Storm
194760 8.3 HIGH
Network 		envoyproxy envoy Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path wi… - CVE-2021-29492 2024-11-21 15:01 2021-05-29 Show GitHub Exploit DB Packet Storm