Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255251	5	警告	レッドハット	-	IcedTea における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3860	2011-02-21 16:53	2010-12-8	Show	GitHub Exploit DB Packet Storm

255252	6.8	警告	レッドハット	-	IcedTea の JNLP SecurityManager におけるセキュリティポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4351	2011-02-21 14:58	2011-01-20	Show	GitHub Exploit DB Packet Storm

255253	4.3	警告	シマンテック	-	Symantec Norton Mobile Security for Android における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0113	2011-02-21 14:55	2010-11-15	Show	GitHub Exploit DB Packet Storm

255254	4.3	警告	Google	-	Android の Dalvik API におけるサービス運用妨害 (DoS) 脆弱性	CWE-noinfo 情報不足	CVE-2009-3698	2011-02-21 14:54	2009-10-14	Show	GitHub Exploit DB Packet Storm

255255	5	警告	CollabNet, Inc.	-	CollabNet ScrumWorks Basic Server における認証情報取り扱いに関する問題	CWE-310 暗号の問題	CVE-2011-0410	2011-02-21 14:54	2011-01-24	Show	GitHub Exploit DB Packet Storm

255256	5	警告	The PHP Group レッドハット	-	Libmbfl の mb_strcut 関数における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4156	2011-02-18 15:07	2010-11-10	Show	GitHub Exploit DB Packet Storm

255257	6.8	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP の xml_utf8_decode 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-5016	2011-02-18 15:03	2010-11-12	Show	GitHub Exploit DB Packet Storm

255258	6.8	警告	The PHP Group	-	PHP の set_magic_quotes_runtime 関数における SQL インジェクション攻撃を誘導される脆弱性	CWE-89 SQLインジェクション	CVE-2010-4700	2011-02-18 14:42	2010-07-1	Show	GitHub Exploit DB Packet Storm

255259	7.5	危険	The PHP Group	-	PHP の iconv_mime_decode_headers 関数におけるスパムの検出を回避される脆弱性	CWE-189 数値処理の問題	CVE-2010-4699	2011-02-18 14:40	2010-09-28	Show	GitHub Exploit DB Packet Storm

255260	5	警告	The PHP Group	-	PHP の GD 拡張モジュールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4698	2011-02-18 14:38	2010-12-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195241	5.0	MEDIUM Local	mcafee	endpoint_security	Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and cre…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2021-23878	2024-11-21 14:51	2021-02-10	Show	GitHub Exploit DB Packet Storm

195242	6.3	MEDIUM Network	fusioncharts	apexcharts	The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.	CWE-79 Cross-site Scripting	CVE-2021-23327	2024-11-21 14:51	2021-02-9	Show	GitHub Exploit DB Packet Storm

195243	3.3	LOW Local	squareup	connect_java_software_development_kit	This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like sy…	NVD-CWE-noinfo	CVE-2021-23331	2024-11-21 14:51	2021-02-4	Show	GitHub Exploit DB Packet Storm

195244	8.0	HIGH Network	tibco	ebx	The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site S…	CWE-79 Cross-site Scripting	CVE-2021-23271	2024-11-21 14:51	2021-02-3	Show	GitHub Exploit DB Packet Storm

195245	9.8	CRITICAL Network	bitovi	launchpad	All versions of package launchpad are vulnerable to Command Injection via stop.	CWE-78 OS Command	CVE-2021-23330	2024-11-21 14:51	2021-02-2	Show	GitHub Exploit DB Packet Storm

195246	7.5	HIGH Network	getadigital	nested-object-assign	The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23329	2024-11-21 14:51	2021-02-1	Show	GitHub Exploit DB Packet Storm

195247	5.6	MEDIUM Network	iniparserjs_project	iniparserjs	This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute …	NVD-CWE-Other	CVE-2021-23328	2024-11-21 14:51	2021-01-30	Show	GitHub Exploit DB Packet Storm

195248	5.4	MEDIUM Network	tibco	bpm_enterprise bpm_enterprise_distribution_for_silver_fabric	The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically a…	CWE-79 Cross-site Scripting	CVE-2021-23272	2024-11-21 14:51	2021-01-27	Show	GitHub Exploit DB Packet Storm

195249	8.8	HIGH Network	the-guild	graphql-tools	This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.	CWE-78 OS Command	CVE-2021-23326	2024-11-21 14:51	2021-01-20	Show	GitHub Exploit DB Packet Storm

195250	4.8	MEDIUM Network	flatcore	flatcore	An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request body parameter for the acp interface. The affected parameter …	CWE-79 Cross-site Scripting	CVE-2021-23838	2024-11-21 14:51	2021-01-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed