Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255201	4.4	警告	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Enterprise Linux の pam_krb5 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3825	2011-02-28 14:48	2008-10-2	Show	GitHub Exploit DB Packet Storm

255202	6.8	警告	Haxx アップル VMware サイバートラスト株式会社レッドハット	-	libcurl の content_encoding.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0734	2011-02-28 14:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

255203	4.3	警告	VMware OpenSSL Project	-	OpenSSL クライアントの ssl3_get_key_exchange 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2939	2011-02-28 14:39	2010-08-17	Show	GitHub Exploit DB Packet Storm

255204	10	危険	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の Java Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0886	2011-02-28 14:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

255205	8.3	危険	インターネットイニシアティブ	-	SEIL シリーズにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0454	2011-02-28 12:08	2011-02-28	Show	GitHub Exploit DB Packet Storm

255206	6.8	警告	Google	-	OpenCORE の Huffman デコーディング機能における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0475	2011-02-25 14:13	2009-02-17	Show	GitHub Exploit DB Packet Storm

255207	7.2	危険	Google	-	T-Mobile G1 phone 上で稼働する Open Handset Alliance Android の link_image 関数における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2009-0606	2011-02-25 14:11	2009-02-17	Show	GitHub Exploit DB Packet Storm

255208	5	警告	シスコシステムズ	-	Cisco IOS 上で稼働する STCAPP におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-4687	2011-02-25 14:07	2011-01-7	Show	GitHub Exploit DB Packet Storm

255209	7.8	危険	シスコシステムズ	-	Cisco IOS 上で稼働する CallManager Express におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4686	2011-02-25 14:05	2011-01-7	Show	GitHub Exploit DB Packet Storm

255210	4	警告	シスコシステムズ	-	Cisco IOS における証明書マップによる制限を回避される脆弱性	CWE-310 暗号の問題	CVE-2010-4685	2011-02-25 14:03	2011-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195161	5.5	MEDIUM Local	f5	nginx_controller	The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.	CWE-330 Use of Insufficiently Random Values	CVE-2021-23020	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195162	7.8	HIGH Local	f5	nginx_controller	The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.	CWE-522 Insufficiently Protected Credentials	CVE-2021-23019	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195163	7.7	HIGH Network	f5 openresty fedoraproject netapp oracle	nginx openresty fedora ontap_select_deploy_administration_utility communications_operations_monitor enterprise_session_border_controller communications_session_border_controller …	A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process cra…	-	CVE-2021-23017	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195164	7.4	HIGH Network	f5	nginx_controller	Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2021-23018	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195165	6.1	MEDIUM Network	trailing-slash_project	trailing-slash	The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker…	CWE-601 Open Redirect	CVE-2021-23387	2024-11-21 14:51	2021-05-25	Show	GitHub Exploit DB Packet Storm

195166	6.5	MEDIUM Network	dns-packet_project	dns-packet	This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over un…	CWE-909 Missing Initialization of Resource	CVE-2021-23386	2024-11-21 14:51	2021-05-21	Show	GitHub Exploit DB Packet Storm

195167	5.4	MEDIUM Network	koa-remove-trailing-slashes_project	koa-remove-trailing-slashes	The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.…	CWE-601 Open Redirect	CVE-2021-23384	2024-11-21 14:51	2021-05-18	Show	GitHub Exploit DB Packet Storm

195168	5.5	MEDIUM Local	argoproj	argo_cd	Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo C…	CWE-209 Information Exposure Through an Error Message	CVE-2021-23135	2024-11-21 14:51	2021-05-13	Show	GitHub Exploit DB Packet Storm

195169	7.8	HIGH Local	linux fedoraproject debian	linux_kernel fedora debian_linux	Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privi…	CWE-416 Use After Free	CVE-2021-23134	2024-11-21 14:51	2021-05-13	Show	GitHub Exploit DB Packet Storm

195170	7.8	HIGH Local	mcafee	total_protection	Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the …	CWE-59 Link Following	CVE-2021-23872	2024-11-21 14:51	2021-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed