Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224581	3.5	注意	ATutor	-	ATutor の mods/_standard/forums/admin/forum_add.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2091	2014-03-4 14:02	2014-02-19	Show	GitHub Exploit DB Packet Storm

224582	3.5	注意	ILIAS	-	ILIAS の ilias.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2090	2014-03-4 13:58	2014-02-21	Show	GitHub Exploit DB Packet Storm

224583	6.8	警告	ILIAS	-	ILIAS における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-2089	2014-03-4 13:57	2014-02-21	Show	GitHub Exploit DB Packet Storm

224584	6.5	警告	ILIAS	-	ILIAS の ilias.php における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2014-2088	2014-03-4 13:57	2014-02-21	Show	GitHub Exploit DB Packet Storm

224585	7.2	危険	Norman	-	Norman Security Suite における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0816	2014-03-3 18:57	2014-02-26	Show	GitHub Exploit DB Packet Storm

224586	4.3	警告	理化学研究所脳科学総合研究センター神経情報基盤センター	-	XooNIps におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1968	2014-03-3 18:56	2014-02-26	Show	GitHub Exploit DB Packet Storm

224587	4	警告	株式会社セブン＆アイ・フードシステムズ	-	Android 版アプリ「デニーズ」における SSL サーバ証明書の検証不備の脆弱性	CWE-Other その他	CVE-2014-1967	2014-03-3 18:55	2014-02-26	Show	GitHub Exploit DB Packet Storm

224588	4.9	警告	サイボウズ	-	サイボウズガルーンにおけるセッション管理不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0817	2014-03-3 18:53	2014-02-26	Show	GitHub Exploit DB Packet Storm

224589	6.9	警告	Schneider Electric	-	Schneider Electric OPC Factory Server の C++ サンプルクライアントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0774	2014-03-3 18:53	2014-01-31	Show	GitHub Exploit DB Packet Storm

224590	3.5	注意	サイボウズ	-	サイボウズガルーンにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-0820	2014-03-3 18:52	2014-02-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200791	7.5	HIGH Network	contiki-ng	contiki-ng	Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loo…	-	CVE-2021-21279	2024-11-21 14:47	2021-06-19	Show	GitHub Exploit DB Packet Storm

200792	7.5	HIGH Network	contiki-ng	contiki-ng	Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do …	-	CVE-2021-21257	2024-11-21 14:47	2021-06-19	Show	GitHub Exploit DB Packet Storm

200793	9.8	CRITICAL Network	contiki-ng	contiki-ng	Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In versions prior to 4.5, buffer overflow can be triggered by an input packet when using either of Contik…	CWE-120 Classic Buffer Overflow	CVE-2021-21282	2024-11-21 14:47	2021-06-19	Show	GitHub Exploit DB Packet Storm

200794	5.9	MEDIUM Network	atomtech	smart_life	The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not verify server certificate properly, which allows man-in-the-mid…	CWE-295 Improper Certificate Validation	CVE-2021-20732	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

200795	8.8	HIGH Adjacent	buffalo	wsr-1166dhp4_firmware wsr-1166dhp3_firmware	WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.	CWE-78 OS Command	CVE-2021-20731	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

200796	4.3	MEDIUM Adjacent	buffalo	wsr-1166dhp4_firmware wsr-1166dhp3_firmware	Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified v…	NVD-CWE-Other	CVE-2021-20730	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

200797	5.3	MEDIUM Network	nttr	goo_blog	Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via t…	NVD-CWE-Other	CVE-2021-20728	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

200798	9.8	CRITICAL Network	sharp-nec-displays	un462a_firmware un462va_firmware un492s_firmware un492vs_firmware un552a_firmware un552s_firmware un552vs_firmware un552_firmware un552v_firmware ux552s_firmware ux552_f…	Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and pri…	CWE-77 CWE-120 Command Injection Classic Buffer Overflow	CVE-2021-20699	2024-11-21 14:47	2021-06-7	Show	GitHub Exploit DB Packet Storm

200799	9.8	CRITICAL Network	sharp-nec-displays	un462a_firmware un462va_firmware un492s_firmware un492vs_firmware un552a_firmware un552s_firmware un552vs_firmware un552_firmware un552v_firmware ux552s_firmware ux552_f…	Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prio…	NVD-CWE-noinfo	CVE-2021-20698	2024-11-21 14:47	2021-06-7	Show	GitHub Exploit DB Packet Storm

200800	6.1	MEDIUM Network	zettlr	zettlr	Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.	CWE-79 Cross-site Scripting	CVE-2021-20727	2024-11-21 14:47	2021-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed