Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254891 5 警告 アップル - Apple iOS の Safari にある Safari 設定機能におけるユーザを追跡可能な脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0159 2011-04-6 17:34 2011-03-11 Show GitHub Exploit DB Packet Storm
254892 7.5 危険 アップル - Apple iOS の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0157 2011-04-6 17:29 2011-03-11 Show GitHub Exploit DB Packet Storm
254893 5 警告 OpenSLP - OpenSLP にサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-3609 2011-04-6 17:27 2011-03-22 Show GitHub Exploit DB Packet Storm
254894 5.8 警告 Apache Software Foundation - Apache Tomcat におけるアクセス制限を回避される脆弱性 CWE-DesignError
CVE-2011-1088 2011-04-6 17:23 2011-03-11 Show GitHub Exploit DB Packet Storm
254895 9.3 危険 マイクロソフト - Microsoft Groove 2007 における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3146 2011-04-6 17:09 2011-03-8 Show GitHub Exploit DB Packet Storm
254896 9.3 危険 マイクロソフト - Microsoft Remote Desktop Connection のクライアントにおける権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0029 2011-04-6 16:57 2011-03-8 Show GitHub Exploit DB Packet Storm
254897 9.3 危険 マイクロソフト - 複数の Microsoft 製品の SBE.dll における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0042 2011-04-6 16:53 2011-03-8 Show GitHub Exploit DB Packet Storm
254898 9.3 危険 マイクロソフト - 複数の Microsoft 製品の DirectShow における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0032 2011-04-6 16:17 2011-03-8 Show GitHub Exploit DB Packet Storm
254899 7.5 危険 IBM - IBM WAS の Plug-in コンポーネントにおける Trace リクエストの処理に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1309 2011-04-5 15:52 2011-02-28 Show GitHub Exploit DB Packet Storm
254900 4.3 警告 IBM - IBM WAS の Installation Verification Test アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1308 2011-04-5 15:47 2011-02-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195221 6.5 MEDIUM
Network 		llhttp
oracle
debian 		llhttp
graalvm
debian_linux 		The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions. CWE-444
HTTP Request Smuggling 		CVE-2021-22960 2024-11-21 14:51 2021-11-4 Show GitHub Exploit DB Packet Storm
195222 6.1 MEDIUM
Network 		tempura_project tempura This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scri… CWE-79
Cross-site Scripting 		CVE-2021-23784 2024-11-21 14:51 2021-11-4 Show GitHub Exploit DB Packet Storm
195223 9.8 CRITICAL
Network 		dotty_project dotty This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays. CWE-843
Type Confusion 		CVE-2021-23624 2024-11-21 14:51 2021-11-4 Show GitHub Exploit DB Packet Storm
195224 9.8 CRITICAL
Network 		json-ptr_project json-ptr This affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used in the pointer parameter are arrays. CWE-843
Type Confusion 		CVE-2021-23509 2024-11-21 14:51 2021-11-4 Show GitHub Exploit DB Packet Storm
195225 6.1 MEDIUM
Network 		bootstrap-table bootstrap_table This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an arra… CWE-843
Type Confusion 		CVE-2021-23472 2024-11-21 14:51 2021-11-4 Show GitHub Exploit DB Packet Storm
195226 9.8 CRITICAL
Network 		jsonpointer_project jsonpointer This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays. CWE-843
Type Confusion 		CVE-2021-23820 2024-11-21 14:51 2021-11-4 Show GitHub Exploit DB Packet Storm
195227 7.8 HIGH
Local 		mcafee total_protection Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection (MTP) prior to 16.0.34_x may allow a local user to run arbitrary code as the admin user by replacing a spe… CWE-269
 Improper Privilege Management 		CVE-2021-23877 2024-11-21 14:51 2021-10-27 Show GitHub Exploit DB Packet Storm
195228 7.5 HIGH
Network 		trendmicro apex_one
worry-free_business_security
worry-free_business_security_services 		A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations. CWE-476
 NULL Pointer Dereference 		CVE-2021-23139 2024-11-21 14:51 2021-10-21 Show GitHub Exploit DB Packet Storm
195229 9.8 CRITICAL
Network 		binaryops x-assign This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23452 2024-11-21 14:51 2021-10-20 Show GitHub Exploit DB Packet Storm
195230 10.0 CRITICAL
Network 		vm2_project vm2 This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2021-23449 2024-11-21 14:51 2021-10-19 Show GitHub Exploit DB Packet Storm