Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254361 5 警告 アップル
VMware
OpenSSL Project
IBM
ヒューレット・パッカード
- OpenSSL の ssl3_get_record 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0740 2011-06-29 10:08 2010-03-24 Show GitHub Exploit DB Packet Storm
254362 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2094 2011-06-28 12:25 2011-06-14 Show GitHub Exploit DB Packet Storm
254363 5 警告 アドビシステムズ - Adobe ColdFusion におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-2091 2011-06-28 12:23 2011-06-14 Show GitHub Exploit DB Packet Storm
254364 6.8 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0629 2011-06-28 12:22 2011-06-14 Show GitHub Exploit DB Packet Storm
254365 10 危険 アドビシステムズ
ターボリナックス
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2110 2011-06-28 12:21 2011-06-14 Show GitHub Exploit DB Packet Storm
254366 5 警告 ISC, Inc.
ターボリナックス
- ISC DHCP の dhcpd におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-16
環境設定
CVE-2009-1892 2011-06-28 12:19 2009-10-7 Show GitHub Exploit DB Packet Storm
254367 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1266 2011-06-28 12:18 2011-06-14 Show GitHub Exploit DB Packet Storm
254368 4.3 警告 マイクロソフト - Windows Server 2003 および 2008 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1264 2011-06-28 12:17 2011-06-14 Show GitHub Exploit DB Packet Storm
254369 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1261 2011-06-28 12:16 2011-06-14 Show GitHub Exploit DB Packet Storm
254370 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 8 における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1258 2011-06-28 12:16 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195181 7.5 HIGH
Network
path-parse_project path-parse All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-… NVD-CWE-noinfo
CVE-2021-23343 2024-11-21 14:51 2021-05-4 Show GitHub Exploit DB Packet Storm
195182 5.3 MEDIUM
Network
browserslist_project browserslist The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries. CWE-1333
 Inefficient Regular Expression Complexity
CVE-2021-23364 2024-11-21 14:51 2021-04-29 Show GitHub Exploit DB Packet Storm
195183 7.5 HIGH
Network
postcss postcss The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused … CWE-1333
 Inefficient Regular Expression Complexity
CVE-2021-23382 2024-11-21 14:51 2021-04-27 Show GitHub Exploit DB Packet Storm
195184 9.1 CRITICAL
Network
tyk tyk-identity-broker The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the X… CWE-287
Improper Authentication
CVE-2021-23365 2024-11-21 14:51 2021-04-26 Show GitHub Exploit DB Packet Storm
195185 9.8 CRITICAL
Network
killing_project killing This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec fu… CWE-78
OS Command 
CVE-2021-23381 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195186 7.3 HIGH
Network
roar-pidusage_project roar-pidusage This affects all versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of this package on certain operating systems, it is possible for an attacker to exe… CWE-78
OS Command 
CVE-2021-23380 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195187 9.8 CRITICAL
Network
portkiller_project portkiller This affects all versions of package portkiller. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process ex… CWE-78
OS Command 
CVE-2021-23379 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195188 9.8 CRITICAL
Network
picotts_project picotts This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the c… CWE-78
OS Command 
CVE-2021-23378 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195189 9.8 CRITICAL
Network
onion-oled-js_project onion-oled-js This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, it is possible for an attacker to execute arbitrary commands. This is due to use… CWE-78
OS Command 
CVE-2021-23377 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195190 9.8 CRITICAL
Network
ffmpegdotjs_project ffmpegdotjs This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to us… CWE-78
OS Command 
CVE-2021-23376 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm