Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258341 6.8 警告 OTRS プロジェクト - OTRS における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-0456 2011-03-7 12:02 2011-03-7 Show GitHub Exploit DB Packet Storm
258342 7.1 危険 マイクロソフト - 複数の Microsoft 製品の JScript および VBScript スクリプトエンジンにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-0031 2011-03-4 15:12 2011-02-8 Show GitHub Exploit DB Packet Storm
258343 9.3 危険 マイクロソフト - Microsoft Visio の ELEMENTS.DLL における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0093 2011-03-4 15:09 2011-02-8 Show GitHub Exploit DB Packet Storm
258344 9.3 危険 マイクロソフト - Microsoft Visio の LZW ストリーム圧縮機能における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0092 2011-03-4 15:06 2011-02-8 Show GitHub Exploit DB Packet Storm
258345 5 警告 マイクロソフト - Windows Server 2003 上で稼働する Microsoft Active Directory におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0040 2011-03-4 15:02 2011-02-8 Show GitHub Exploit DB Packet Storm
258346 9.3 危険 マイクロソフト - 複数の Microsoft 製品の Windows OpenType Compact Font Format ドライバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0033 2011-03-4 15:00 2011-02-8 Show GitHub Exploit DB Packet Storm
258347 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0038 2011-03-4 14:53 2011-02-8 Show GitHub Exploit DB Packet Storm
258348 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0036 2011-03-4 14:50 2011-02-8 Show GitHub Exploit DB Packet Storm
258349 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0035 2011-03-4 14:30 2011-02-8 Show GitHub Exploit DB Packet Storm
258350 5 警告 日立 - Hitachi Tuning Manager Software におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2011-03-4 14:24 2011-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197121 5.5 MEDIUM
Local 		google android Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information. NVD-CWE-Other
CVE-2021-25453 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197122 5.5 MEDIUM
Local 		google android An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device. CWE-20
 Improper Input Validation  		CVE-2021-25452 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197123 3.3 LOW
Local 		google android A PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows attackers to get IMSI data. CWE-287
Improper Authentication 		CVE-2021-25451 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197124 6.5 MEDIUM
Adjacent 		google android Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket. CWE-22
Path Traversal 		CVE-2021-25450 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197125 9.8 CRITICAL
Network 		google android An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2021-25449 2024-11-21 14:55 2021-09-10 Show GitHub Exploit DB Packet Storm
197126 4.8 MEDIUM
Network 		kubernetes kubernetes A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or … CWE-601
Open Redirect 		CVE-2021-25737 2024-11-21 14:55 2021-09-6 Show GitHub Exploit DB Packet Storm
197127 6.5 MEDIUM
Network 		kubernetes kubernetes A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Adm… NVD-CWE-Other
CVE-2021-25735 2024-11-21 14:55 2021-09-6 Show GitHub Exploit DB Packet Storm
197128 7.5 HIGH
Network 		apache ofbiz In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon… CWE-209
Information Exposure Through an Error Message 		CVE-2021-25958 2024-11-21 14:55 2021-08-30 Show GitHub Exploit DB Packet Storm
197129 9.8 CRITICAL
Network 		atlassian confluence_server
confluence_data_center 		In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data… CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2021-26084 2024-11-21 14:55 2021-08-30 Show GitHub Exploit DB Packet Storm
197130 9.1 CRITICAL
Network 		joomla joomla\! An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command. CWE-863
 Incorrect Authorization 		CVE-2021-26040 2024-11-21 14:55 2021-08-25 Show GitHub Exploit DB Packet Storm