Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224081 5 警告 AlstraSoft - Alstrasoft Article Manager Pro における重要な情報を取得される脆弱性 - CVE-2006-2566 2013-12-26 15:44 2006-05-24 Show GitHub Exploit DB Packet Storm
224082 5 警告 Snitz - Snitz Forums 用 Avatar MOD の avatar_upload.asp におけるファイルタイプのチェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-2530 2013-12-26 15:44 2006-05-22 Show GitHub Exploit DB Packet Storm
224083 7.5 危険 smartisoft - phpBazar の Admin/admin.php における認証を回避される脆弱性 - CVE-2006-2527 2013-12-26 15:44 2006-05-22 Show GitHub Exploit DB Packet Storm
224084 5 警告 Bitrix - Bitrix Site Manager におけるユーザを他の Web サイトへリダイレクトされる脆弱性 - CVE-2006-2478 2013-12-26 15:44 2006-05-19 Show GitHub Exploit DB Packet Storm
224085 5 警告 Bitrix - Bitrix Site Manager における重要な情報を取得される脆弱性 - CVE-2006-2476 2013-12-26 15:44 2006-05-19 Show GitHub Exploit DB Packet Storm
224086 6.4 警告 duware - DUware DUbanner の add.asp における任意のコードを実行される脆弱性 - CVE-2006-2428 2013-12-26 15:44 2006-05-17 Show GitHub Exploit DB Packet Storm
224087 5 警告 angelinecms - AngelineCMS における重要な情報を取得される脆弱性 - CVE-2006-2329 2013-12-26 15:44 2006-05-12 Show GitHub Exploit DB Packet Storm
224088 10 危険 180solutions - 180solutions Zango における任意のコードを実行される脆弱性 - CVE-2006-2324 2013-12-26 15:44 2006-05-12 Show GitHub Exploit DB Packet Storm
224089 2.6 注意 Skype Technologies S.A. - Windows 用 Skype の URI ハンドラにおける任意のファイルをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2006-2312 2013-12-26 15:44 2006-05-19 Show GitHub Exploit DB Packet Storm
224090 5 警告 New Atlanta Communications, LLC. - Windows 用 BlueDragon Server および Server JX におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2310 2013-12-26 15:44 2006-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199491 5.4 MEDIUM
Network 		jenkins extra_columns Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers … CWE-79
Cross-site Scripting 		CVE-2021-21630 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
199492 8.8 HIGH
Network 		jenkins build_with_parameters A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters. CWE-352
 Origin Validation Error 		CVE-2021-21629 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
199493 5.4 MEDIUM
Network 		jenkins build_with_parameters Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job… CWE-79
Cross-site Scripting 		CVE-2021-21628 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
199494 7.5 HIGH
Network 		zte zxhn_f623_firmware A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service.… NVD-CWE-noinfo
CVE-2021-21727 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
199495 6.5 MEDIUM
Network 		wire wire_server wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in… - CVE-2021-21396 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
199496 8.1 HIGH
Network 		nim-lang nim Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full veri… CWE-295
Improper Certificate Validation  		CVE-2021-21374 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
199497 5.9 MEDIUM
Network 		nim-lang nim Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In ca… CWE-295
Improper Certificate Validation  		CVE-2021-21373 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
199498 8.8 HIGH
Network 		nim-lang nim Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitra… CWE-78
OS Command  		CVE-2021-21372 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
199499 8.8 HIGH
Network 		buddypress buddypress BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rig… - CVE-2021-21389 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm
199500 5.5 MEDIUM
Network 		oauth2_proxy_project oauth2_proxy OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `--gitlab-group` flag for group-based authorization in the GitLab provider stoppe… - CVE-2021-21411 2024-11-21 14:48 2021-03-27 Show GitHub Exploit DB Packet Storm