Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133101	3.7	低 Network	株式会社WESEEK	GROWI	GROWI における複数の脆弱性	CWE-20 CWE-22 CWE-284 CWE-79	CVE-2021-20667 CVE-2021-20668 CVE-2021-20669 CVE-2021-20670 CVE-2021-20671 CVE-2021-20829	2021-09-21 16:52	2021-03-8	Show	GitHub Exploit DB Packet Storm

133102	5.3	警告 Network	WP Ninjas, LLC.	Ninja Forms	WordPress 用 Ninja Forms プラグインにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2020-36175	2021-09-21 16:38	2020-09-17	Show	GitHub Exploit DB Packet Storm

133103	6.5	警告 Network	ネットギア	NMS300 ファームウェア	NETGEAR NMS300 デバイスにおける脆弱性	CWE-noinfo 情報不足	CVE-2020-35780	2021-09-21 16:34	2020-12-22	Show	GitHub Exploit DB Packet Storm

133104	8.6	重要 Network	ネットギア	NMS300 ファームウェア	NETGEAR NMS300 デバイスにおける脆弱性	CWE-noinfo 情報不足	CVE-2020-35779	2021-09-21 16:30	2020-12-22	Show	GitHub Exploit DB Packet Storm

133105	8.8	重要 Network	ネットギア	GS724T ファームウェア GS716T ファームウェア	複数の NETGEAR デバイスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2020-35778	2021-09-21 16:30	2020-12-22	Show	GitHub Exploit DB Packet Storm

133106	8.4	重要 Adjacent	ネットギア	NetGear DGN2200v1	NETGEAR DGN2200v1 デバイスにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2020-35777	2021-09-21 16:30	2020-12-16	Show	GitHub Exploit DB Packet Storm

133107	7.5	重要 Network	iThemes	iThemes Security	WordPress 用 iThemes Security プラグインにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2020-36176	2021-09-21 16:26	2021-01-6	Show	GitHub Exploit DB Packet Storm

133108	6.5	警告 Network	デル	Dell EMC Unity Operating Environment Dell EMC UnityVSA Operating Environment Dell EMC Unity XT Operating Environment	複数の Dell EMC 製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2020-29490	2021-09-21 16:17	2020-12-17	Show	GitHub Exploit DB Packet Storm

133109	6.7	警告 Local	デル	Dell EMC Unity Operating Environment Dell EMC UnityVSA Operating Environment Dell EMC Unity XT Operating Environment	複数の Dell EMC 製品における重要な情報の平文保存に関する脆弱性	CWE-312 重要な情報の平文保存	CVE-2020-29489	2021-09-21 16:17	2020-12-17	Show	GitHub Exploit DB Packet Storm

133110	7.8	重要 Local	Pearson VUE	VUE Testing System	Pearson VUE VTS インストーラにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2020-36154	2021-09-21 16:17	2020-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356991	-	surfcontrol	superscout_email_filter	Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or …	NVD-CWE-Other	CVE-2002-1529	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356992	-	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes …	NVD-CWE-Other	CVE-2002-1530	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356993	-	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.	NVD-CWE-Other	CVE-2002-1531	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356994	-	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminatin…	NVD-CWE-Other	CVE-2002-1532	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356995	-	jetty	jetty	Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious sc…	NVD-CWE-Other	CVE-2002-1533	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356996	-	macromedia	flash_player	Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.	NVD-CWE-Other	CVE-2002-1534	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356997	-	symantec	enterprise_firewall raptor_firewall	Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates diff…	NVD-CWE-Other	CVE-2002-1535	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356998	-	hans_persson	molly	Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) th…	NVD-CWE-Other	CVE-2002-1536	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

356999	-	phpbb_group	phpbb	admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".	NVD-CWE-Other	CVE-2002-1537	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

357000	-	acuma	acusend	Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.	NVD-CWE-Other	CVE-2002-1538	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed