Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255851 2.6 注意 アップル
サン・マイクロシステムズ
Apache Software Foundation
- Apache HTTP Server 用 mod_perl の Status.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-0796 2010-11-25 15:12 2009-04-7 Show GitHub Exploit DB Packet Storm
255852 6.8 警告 アップル
サイバートラスト株式会社
WebDAV
レッドハット
- neon における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2009-2474 2010-11-25 15:11 2009-08-18 Show GitHub Exploit DB Packet Storm
255853 4.3 警告 アップル
サイバートラスト株式会社
WebDAV
レッドハット
- neon におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-2473 2010-11-25 15:11 2009-08-18 Show GitHub Exploit DB Packet Storm
255854 10 危険 アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
FreeType Project
レッドハット
- FreeType における入力処理に関する整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-0946 2010-11-25 15:11 2009-04-17 Show GitHub Exploit DB Packet Storm
255855 4.3 警告 アップル
アドビシステムズ
ターボリナックス
レッドハット
- Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-4546 2010-11-25 15:10 2008-10-14 Show GitHub Exploit DB Packet Storm
255856 4.3 警告 Google - Google Chrome におけるクライアントユーザに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0644 2010-11-24 15:04 2010-02-10 Show GitHub Exploit DB Packet Storm
255857 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-2649 2010-11-24 15:04 2010-07-2 Show GitHub Exploit DB Packet Storm
255858 10 危険 Google - Google Chrome における脆弱性 CWE-DesignError
CVE-2010-2110 2010-11-24 15:04 2010-05-25 Show GitHub Exploit DB Packet Storm
255859 4.3 警告 Google - Google Chrome の browser/login/login_prompt.cc における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-0556 2010-11-24 15:03 2010-02-10 Show GitHub Exploit DB Packet Storm
255860 7.5 危険 Google - Google Chrome の HTTP ヘッダ処理における脆弱性 CWE-DesignError
CVE-2010-1231 2010-11-24 15:03 2010-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195141 9.8 CRITICAL
Network
portkiller_project portkiller This affects all versions of package portkiller. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process ex… CWE-78
OS Command 
CVE-2021-23379 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195142 9.8 CRITICAL
Network
picotts_project picotts This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the c… CWE-78
OS Command 
CVE-2021-23378 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195143 9.8 CRITICAL
Network
onion-oled-js_project onion-oled-js This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, it is possible for an attacker to execute arbitrary commands. This is due to use… CWE-78
OS Command 
CVE-2021-23377 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195144 9.8 CRITICAL
Network
ffmpegdotjs_project ffmpegdotjs This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to us… CWE-78
OS Command 
CVE-2021-23376 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195145 9.8 CRITICAL
Network
psnode_project psnode This affects all versions of package psnode. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the c… CWE-78
OS Command 
CVE-2021-23375 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195146 9.8 CRITICAL
Network
ps-visitor_project ps-visitor This affects all versions of package ps-visitor. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of t… CWE-78
OS Command 
CVE-2021-23374 2024-11-21 14:51 2021-04-19 Show GitHub Exploit DB Packet Storm
195147 7.0 HIGH
Local
linux
fedoraproject
debian
netapp
broadcom
linux_kernel
fedora
debian_linux
cloud_backup
solidfire_\&_hci_management_node
brocade_fabric_operating_system
h410c_firmware
h300s_firmware
h500s_firmware
h700s_firmwa…
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_des… CWE-362
Race Condition
CVE-2021-23133 2024-11-21 14:51 2021-04-23 Show GitHub Exploit DB Packet Storm
195148 7.5 HIGH
Network
mongo-express_project mongo-express All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash. CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2021-23372 2024-11-21 14:51 2021-04-14 Show GitHub Exploit DB Packet Storm
195149 10.0 CRITICAL
Network
eaton intelligent_power_manager Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action… CWE-94
Code Injection
CVE-2021-23281 2024-11-21 14:51 2021-04-14 Show GitHub Exploit DB Packet Storm
195150 9.9 CRITICAL
Network
eaton intelligent_power_manager
intelligent_power_manager_virtual_appliance
intelligent_power_protector
Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using up… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2021-23280 2024-11-21 14:51 2021-04-14 Show GitHub Exploit DB Packet Storm