Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254151	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2365	2012-01-27 16:32	2011-06-21	Show	GitHub Exploit DB Packet Storm

254152	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsSVGPointList::AppendElement 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2363	2012-01-27 16:31	2011-06-21	Show	GitHub Exploit DB Packet Storm

254153	5	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2362	2012-01-27 16:25	2011-06-21	Show	GitHub Exploit DB Packet Storm

254154	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsXULCommandDispatcher 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0085	2012-01-27 16:23	2011-06-21	Show	GitHub Exploit DB Packet Storm

254155	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsSVGPathSegList::ReplaceItem 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0083	2012-01-27 16:22	2011-06-21	Show	GitHub Exploit DB Packet Storm

254156	4.3	警告	シマンテック	-	Symantec pcAnywhere 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3479	2012-01-27 16:20	2012-01-22	Show	GitHub Exploit DB Packet Storm

254157	10	危険	シマンテック	-	Symantec pcAnywhere 製品における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2011-3478	2012-01-27 16:18	2012-01-22	Show	GitHub Exploit DB Packet Storm

254158	4.3	警告	Digium	-	Asterisk Open Source の chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-0885	2012-01-27 15:44	2012-01-15	Show	GitHub Exploit DB Packet Storm

254159	4.3	警告	Google	-	Android の Bluetooth サービスにおける連絡先データを取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4276	2012-01-27 15:43	2011-10-28	Show	GitHub Exploit DB Packet Storm

254160	5.8	警告	Tencent	-	Android 用 Tencent QQPhoto における連絡先情報およびパスワードハッシュを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4867	2012-01-27 15:18	2012-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194751	6.1	MEDIUM Network	dmasoftlab	dma_radius_manager	DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).	CWE-79 Cross-site Scripting	CVE-2021-29011	2024-11-21 15:00	2021-04-2	Show	GitHub Exploit DB Packet Storm

194752	6.5	MEDIUM Network	fireeye	email_malware_protection_system	eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. Accordi…	CWE-89 SQL Injection	CVE-2021-28970	2024-11-21 15:00	2021-04-2	Show	GitHub Exploit DB Packet Storm

194753	6.5	MEDIUM Network	fireeye	email_malware_protection_system	eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the iss…	CWE-89 SQL Injection	CVE-2021-28969	2024-11-21 15:00	2021-04-2	Show	GitHub Exploit DB Packet Storm

194754	9.1	CRITICAL Network	netmask_project	netmask	Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent…	CWE-704 Incorrect Type Conversion or Cast	CVE-2021-28918	2024-11-21 15:00	2021-04-1	Show	GitHub Exploit DB Packet Storm

194755	7.2	HIGH Network	synology	diskstation_manager	Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute ar…	CWE-78 OS Command	CVE-2021-29083	2024-11-21 15:00	2021-04-1	Show	GitHub Exploit DB Packet Storm

194756	6.5	MEDIUM Network	btcpayserver	btcpay_server	BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured.	NVD-CWE-noinfo	CVE-2021-29251	2024-11-21 15:00	2021-04-1	Show	GitHub Exploit DB Packet Storm

194757	6.5	MEDIUM Network	mahara	mahara	Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An…	CWE-352 Origin Validation Error	CVE-2021-29349	2024-11-21 15:00	2021-04-1	Show	GitHub Exploit DB Packet Storm

194758	7.5	HIGH Network	kopano zarafa	groupware_core zarafa	kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion vi…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2021-28994	2024-11-21 15:00	2021-04-1	Show	GitHub Exploit DB Packet Storm

194759	5.5	MEDIUM Local	apache oracle	tika webcenter_portal primavera_unifier healthcare_foundation communications_messaging_server	A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2021-28657	2024-11-21 15:00	2021-03-31	Show	GitHub Exploit DB Packet Storm

194760	5.4	MEDIUM Network	ovidentia	ovidentia	Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source co…	CWE-89 SQL Injection	CVE-2021-29343	2024-11-21 15:00	2021-03-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed