Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228291 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Mag Zone の view_mags.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4464 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
228292 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Jobs Zone の view_news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4463 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
228293 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Visa Zone の view_news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4462 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
228294 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Dating Zone の advanced_search_results.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4461 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
228295 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech MMORPG Zone の game.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4460 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
228296 6.8 警告 positive software - Positive Software H-Sphere WebShell の actions.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4448 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
228297 4.3 警告 positive software - Positive Software H-Sphere WebShell の actions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4447 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
228298 4.3 警告 rmsoft - Xoops 用の rmdp モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4435 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
228299 7.5 危険 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4433 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
228300 4.3 警告 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4432 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195631 8.1 HIGH
Network 		intel secl-dc Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access. NVD-CWE-Other
CVE-2021-0133 2024-11-21 14:42 2021-06-10 Show GitHub Exploit DB Packet Storm
195632 4.9 MEDIUM
Network 		intel secl-dc Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network acc… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2021-0132 2024-11-21 14:42 2021-06-10 Show GitHub Exploit DB Packet Storm
195633 6.5 MEDIUM
Network 		intel secl-dc Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information di… CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2021-0131 2024-11-21 14:42 2021-06-10 Show GitHub Exploit DB Packet Storm
195634 5.7 MEDIUM
Adjacent 		bluez
redhat
debian 		bluez
enterprise_linux
debian_linux 		Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. NVD-CWE-Other
CVE-2021-0129 2024-11-21 14:42 2021-06-10 Show GitHub Exploit DB Packet Storm
195635 9.8 CRITICAL
Network 		juniper junos The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device managemen… CWE-798
 Use of Hard-coded Credentials 		CVE-2021-0266 2024-11-21 14:42 2021-04-23 Show GitHub Exploit DB Packet Storm
195636 8.1 HIGH
Network 		juniper appformix An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certai… CWE-78
OS Command  		CVE-2021-0265 2024-11-21 14:42 2021-04-23 Show GitHub Exploit DB Packet Storm
195637 10.0 CRITICAL
Network 		juniper junos This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deplo… CWE-798
 Use of Hard-coded Credentials 		CVE-2021-0248 2024-11-21 14:42 2021-04-23 Show GitHub Exploit DB Packet Storm
195638 7.5 HIGH
Network 		juniper junos A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resultin… NVD-CWE-noinfo
CVE-2021-0233 2024-11-21 14:42 2021-04-23 Show GitHub Exploit DB Packet Storm
195639 6.5 MEDIUM
Network 		juniper junos A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX an… CWE-22
Path Traversal 		CVE-2021-0231 2024-11-21 14:42 2021-04-23 Show GitHub Exploit DB Packet Storm
195640 8.8 HIGH
Network 		juniper junos A Cross-site Scripting (XSS) vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to the users session. The other user sessio… CWE-79
Cross-site Scripting 		CVE-2021-0275 2024-11-21 14:42 2021-04-23 Show GitHub Exploit DB Packet Storm