Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255951 6.8 警告 オラクル - Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3538 2011-10-27 10:06 2011-10-18 Show GitHub Exploit DB Packet Storm
255952 5.5 警告 オラクル - Oracle Linux の Oracle Validated 処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2306 2011-10-27 10:05 2011-10-19 Show GitHub Exploit DB Packet Storm
255953 2.1 注意 オラクル - 複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3522 2011-10-27 10:04 2011-10-18 Show GitHub Exploit DB Packet Storm
255954 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における JPM の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3533 2011-10-27 10:03 2011-10-18 Show GitHub Exploit DB Packet Storm
255955 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3529 2011-10-27 10:01 2011-10-18 Show GitHub Exploit DB Packet Storm
255956 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3527 2011-10-27 10:01 2011-10-18 Show GitHub Exploit DB Packet Storm
255957 5.5 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools におけるセキュリティの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2315 2011-10-27 09:59 2011-10-18 Show GitHub Exploit DB Packet Storm
255958 2.8 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools における Personalization の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3520 2011-10-27 09:59 2011-10-18 Show GitHub Exploit DB Packet Storm
255959 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における eDevelopment の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3530 2011-10-27 09:58 2011-10-18 Show GitHub Exploit DB Packet Storm
255960 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における eProfile の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3528 2011-10-27 09:55 2011-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194921 5.4 MEDIUM
Network 		ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin… CWE-79
Cross-site Scripting 		CVE-2021-29666 2024-11-21 15:01 2021-04-28 Show GitHub Exploit DB Packet Storm
194922 9.8 CRITICAL
Network 		alibaba nacos Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=tr… CWE-290
 Authentication Bypass by Spoofing 		CVE-2021-29441 2024-11-21 15:01 2021-04-28 Show GitHub Exploit DB Packet Storm
194923 5.4 MEDIUM
Network 		getkirby kirby Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file can be sent to othe… - CVE-2021-29460 2024-11-21 15:01 2021-04-28 Show GitHub Exploit DB Packet Storm
194924 5.8 MEDIUM
Network 		hedgedoc hedgedoc HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's filesystem due to an improper input validation, which… CWE-22
Path Traversal 		CVE-2021-29474 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194925 10.0 CRITICAL
Network 		hedgedoc hedgedoc HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code i… CWE-94
CWE-918
Code Injection
Server-Side Request Forgery (SSRF)  		CVE-2021-29475 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194926 7.5 HIGH
Network 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 200258. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2021-29694 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194927 7.8 HIGH
Local 		ibm spectrum_protect_client
spectrum_protect_for_space_management 		IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker c… CWE-787
 Out-of-bounds Write 		CVE-2021-29672 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194928 2.5 LOW
Local 		exiv2
fedoraproject
debian 		exiv2
fedora
debian_linux 		Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv… - CVE-2021-29473 2024-11-21 15:01 2021-04-27 Show GitHub Exploit DB Packet Storm
194929 6.5 MEDIUM
Network 		exiv2
fedoraproject 		exiv2
fedora 		Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The o… - CVE-2021-29470 2024-11-21 15:01 2021-04-24 Show GitHub Exploit DB Packet Storm
194930 7.5 HIGH
Network 		redis.js redis Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings… NVD-CWE-Other
CVE-2021-29469 2024-11-21 15:01 2021-04-24 Show GitHub Exploit DB Packet Storm