Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224331 10 危険 180solutions - 180solutions Zango における任意のコードを実行される脆弱性 - CVE-2006-2324 2013-12-26 15:44 2006-05-12 Show GitHub Exploit DB Packet Storm
224332 2.6 注意 Skype Technologies S.A. - Windows 用 Skype の URI ハンドラにおける任意のファイルをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2006-2312 2013-12-26 15:44 2006-05-19 Show GitHub Exploit DB Packet Storm
224333 5 警告 New Atlanta Communications, LLC. - Windows 用 BlueDragon Server および Server JX におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2310 2013-12-26 15:44 2006-06-26 Show GitHub Exploit DB Packet Storm
224334 3.6 注意 Avahi - Avahi におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2288 2013-12-26 15:44 2006-05-10 Show GitHub Exploit DB Packet Storm
224335 5 警告 acftp - acFTP におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2242 2013-12-26 15:44 2006-05-9 Show GitHub Exploit DB Packet Storm
224336 2.1 注意 bitrock
ProcessOne		 - Process-one ejabberd を含む製品で使用されるサードパーティ製インストーラ生成ツールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-2221 2013-12-26 15:44 2006-05-5 Show GitHub Exploit DB Packet Storm
224337 5 警告 321soft - 321soft PhP-Gallery の index.php における絶対パストラバーサルの脆弱性 - CVE-2006-2211 2013-12-26 15:44 2006-05-5 Show GitHub Exploit DB Packet Storm
224338 5 警告 VWar - Virtual War の admin.php における重要な情報を取得される脆弱性 - CVE-2006-2091 2013-12-26 15:44 2006-04-29 Show GitHub Exploit DB Packet Storm
224339 5 警告 Invision Power Services, Inc - Invision Power Board の action_public/search.php における任意の PHP コードを実行される脆弱性 - CVE-2006-2059 2013-12-26 15:44 2006-04-26 Show GitHub Exploit DB Packet Storm
224340 5 警告 avant force - Avant Browser におけるコマンドライン引数を変更される脆弱性 - CVE-2006-2058 2013-12-26 15:44 2006-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199861 9.8 CRITICAL
Network 		openmage magento Magento-lts is a long-term support alternative to Magento Community Edition (CE). In magento-lts versions 19.4.12 and prior and 20.0.8 and prior, there is a vulnerability caused by the unsecured dese… - CVE-2021-21426 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199862 4.3 MEDIUM
Network 		jenkins cloudbees_cd Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item… - CVE-2021-21647 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199863 8.8 HIGH
Network 		jenkins templating_engine Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code … - CVE-2021-21646 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199864 4.3 MEDIUM
Network 		jenkins config_file_provider Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs. - CVE-2021-21645 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199865 5.4 MEDIUM
Network 		jenkins config_file_provider A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID. CWE-352
 Origin Validation Error 		CVE-2021-21644 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199866 6.5 MEDIUM
Network 		jenkins config_file_provider Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate syst… - CVE-2021-21643 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199867 8.1 HIGH
Network 		jenkins config_file_provider Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2021-21642 2024-11-21 14:48 2021-04-22 Show GitHub Exploit DB Packet Storm
199868 6.7 MEDIUM
Local 		dell powerscale_onefs Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root. CWE-78
OS Command  		CVE-2021-21526 2024-11-21 14:48 2021-04-21 Show GitHub Exploit DB Packet Storm
199869 7.5 HIGH
Network 		filecoin lotus Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library method VerifyCompressed. This method accepts signatures in 2 forms: "serialized"… - CVE-2021-21405 2024-11-21 14:48 2021-04-16 Show GitHub Exploit DB Packet Storm
199870 7.5 HIGH
Network 		ampache ampache Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you … CWE-287
Improper Authentication 		CVE-2021-21399 2024-11-21 14:48 2021-04-14 Show GitHub Exploit DB Packet Storm