Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253891 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3017 2012-02-20 14:10 2012-02-15 Show GitHub Exploit DB Packet Storm
253892 7.5 危険 Google - Google Chrome の PDF コーデックにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3015 2012-02-20 14:09 2012-02-15 Show GitHub Exploit DB Packet Storm
253893 10 危険 オラクル - Oracle Java SE の JavaFX コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0508 2012-02-20 10:41 2012-02-14 Show GitHub Exploit DB Packet Storm
253894 9.3 危険 サン・マイクロシステムズ - Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0504 2012-02-20 10:34 2012-02-14 Show GitHub Exploit DB Packet Storm
253895 6.8 警告 Hulihan Applications - Hulihan Amethyst の admin/update_user におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-5085 2012-02-17 14:43 2012-02-14 Show GitHub Exploit DB Packet Storm
253896 6 警告 e107.org - e107 の CSRF 保護メカニズムにおける管理者認証をハイジャックされる脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-5084 2012-02-17 14:43 2012-02-14 Show GitHub Exploit DB Packet Storm
253897 7.5 危険 PHPNUKE - PHP-Nuke 用 Web_Links module における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5083 2012-02-17 14:42 2012-02-14 Show GitHub Exploit DB Packet Storm
253898 4.3 警告 Bluechip Software - TYPO3 用 Post data records to facebook エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1087 2012-02-17 14:42 2012-02-14 Show GitHub Exploit DB Packet Storm
253899 4.3 警告 UrlTool - TYPO3 用 UrlTool エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1086 2012-02-17 14:41 2012-02-14 Show GitHub Exploit DB Packet Storm
253900 5 警告 BE User Switch - TYPO3 用 BE User Switch エクステンションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-1085 2012-02-17 14:40 2012-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194751 6.1 MEDIUM
Network 		dmasoftlab dma_radius_manager DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php). CWE-79
Cross-site Scripting 		CVE-2021-29011 2024-11-21 15:00 2021-04-2 Show GitHub Exploit DB Packet Storm
194752 6.5 MEDIUM
Network 		fireeye email_malware_protection_system eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. Accordi… CWE-89
SQL Injection 		CVE-2021-28970 2024-11-21 15:00 2021-04-2 Show GitHub Exploit DB Packet Storm
194753 6.5 MEDIUM
Network 		fireeye email_malware_protection_system eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the iss… CWE-89
SQL Injection 		CVE-2021-28969 2024-11-21 15:00 2021-04-2 Show GitHub Exploit DB Packet Storm
194754 9.1 CRITICAL
Network 		netmask_project netmask Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent… CWE-704
 Incorrect Type Conversion or Cast 		CVE-2021-28918 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194755 7.2 HIGH
Network 		synology diskstation_manager Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute ar… CWE-78
OS Command  		CVE-2021-29083 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194756 6.5 MEDIUM
Network 		btcpayserver btcpay_server BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured. NVD-CWE-noinfo
CVE-2021-29251 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194757 6.5 MEDIUM
Network 		mahara mahara Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An… CWE-352
 Origin Validation Error 		CVE-2021-29349 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194758 7.5 HIGH
Network 		kopano
zarafa 		groupware_core
zarafa 		kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion vi… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-28994 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194759 5.5 MEDIUM
Local 		apache
oracle 		tika
webcenter_portal
primavera_unifier
healthcare_foundation
communications_messaging_server 		A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2021-28657 2024-11-21 15:00 2021-03-31 Show GitHub Exploit DB Packet Storm
194760 5.4 MEDIUM
Network 		ovidentia ovidentia Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source co… CWE-89
SQL Injection 		CVE-2021-29343 2024-11-21 15:00 2021-03-30 Show GitHub Exploit DB Packet Storm