Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255261	6.8	警告	The PHP Group	-	PHP の set_magic_quotes_runtime 関数における SQL インジェクション攻撃を誘導される脆弱性	CWE-89 SQLインジェクション	CVE-2010-4700	2011-02-18 14:42	2010-07-1	Show	GitHub Exploit DB Packet Storm

255262	7.5	危険	The PHP Group	-	PHP の iconv_mime_decode_headers 関数におけるスパムの検出を回避される脆弱性	CWE-189 数値処理の問題	CVE-2010-4699	2011-02-18 14:40	2010-09-28	Show	GitHub Exploit DB Packet Storm

255263	5	警告	The PHP Group	-	PHP の GD 拡張モジュールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4698	2011-02-18 14:38	2010-12-7	Show	GitHub Exploit DB Packet Storm

255264	6.8	警告	The PHP Group	-	PHP の Zend Engine におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4697	2011-02-18 14:35	2010-09-18	Show	GitHub Exploit DB Packet Storm

255265	1	注意	サン・マイクロシステムズ	-	Oracle Sun Java System Portal Server のプロキシにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4431	2011-02-18 14:30	2011-01-18	Show	GitHub Exploit DB Packet Storm

255266	3.6	注意	オラクル	-	Oracle Solaris 9 の XScreenSaver における脆弱性	CWE-noinfo 情報不足	CVE-2010-3586	2011-02-18 14:28	2011-01-18	Show	GitHub Exploit DB Packet Storm

255267	3.6	注意	オラクル	-	Oracle Solaris 10 の Fault Manager Daemon における脆弱性	CWE-noinfo 情報不足	CVE-2010-4460	2011-02-18 14:11	2011-01-18	Show	GitHub Exploit DB Packet Storm

255268	4.1	警告	オラクル	-	Oracle Solaris 11 Express の ZFS における脆弱性	CWE-noinfo 情報不足	CVE-2010-4458	2011-02-18 14:08	2011-01-18	Show	GitHub Exploit DB Packet Storm

255269	4.1	警告	オラクル	-	Oracle Solaris の libc における脆弱性	CWE-noinfo 情報不足	CVE-2010-4415	2011-02-18 14:06	2011-01-18	Show	GitHub Exploit DB Packet Storm

255270	4.3	警告	サン・マイクロシステムズ	-	Oracle Sun Java System Communications Express の Web メールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4456	2011-02-18 14:03	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195161	5.5	MEDIUM Local	f5	nginx_controller	The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.	CWE-330 Use of Insufficiently Random Values	CVE-2021-23020	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195162	7.8	HIGH Local	f5	nginx_controller	The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.	CWE-522 Insufficiently Protected Credentials	CVE-2021-23019	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195163	7.7	HIGH Network	f5 openresty fedoraproject netapp oracle	nginx openresty fedora ontap_select_deploy_administration_utility communications_operations_monitor enterprise_session_border_controller communications_session_border_controller …	A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process cra…	-	CVE-2021-23017	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195164	7.4	HIGH Network	f5	nginx_controller	Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2021-23018	2024-11-21 14:51	2021-06-1	Show	GitHub Exploit DB Packet Storm

195165	6.1	MEDIUM Network	trailing-slash_project	trailing-slash	The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker…	CWE-601 Open Redirect	CVE-2021-23387	2024-11-21 14:51	2021-05-25	Show	GitHub Exploit DB Packet Storm

195166	6.5	MEDIUM Network	dns-packet_project	dns-packet	This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over un…	CWE-909 Missing Initialization of Resource	CVE-2021-23386	2024-11-21 14:51	2021-05-21	Show	GitHub Exploit DB Packet Storm

195167	5.4	MEDIUM Network	koa-remove-trailing-slashes_project	koa-remove-trailing-slashes	The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.…	CWE-601 Open Redirect	CVE-2021-23384	2024-11-21 14:51	2021-05-18	Show	GitHub Exploit DB Packet Storm

195168	5.5	MEDIUM Local	argoproj	argo_cd	Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo C…	CWE-209 Information Exposure Through an Error Message	CVE-2021-23135	2024-11-21 14:51	2021-05-13	Show	GitHub Exploit DB Packet Storm

195169	7.8	HIGH Local	linux fedoraproject debian	linux_kernel fedora debian_linux	Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privi…	CWE-416 Use After Free	CVE-2021-23134	2024-11-21 14:51	2021-05-13	Show	GitHub Exploit DB Packet Storm

195170	7.8	HIGH Local	mcafee	total_protection	Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the …	CWE-59 Link Following	CVE-2021-23872	2024-11-21 14:51	2021-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed