Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228591	6.8	警告	phpBB	-	phpBB におけるセッションをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-7143	2012-12-20 19:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

228592	4.3	警告	redgalaxy	-	Chris LaPointe RedGalaxy Download Center のデフォルト URI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7134	2012-12-20 19:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

228593	5	警告	xyssl	-	XySSL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-7129	2012-12-20 19:10	2009-08-31	Show	GitHub Exploit DB Packet Storm

228594	7.5	危険	xyssl	-	XySSL の ssl_parse_client_key_exchange 関数における鍵を回復される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7128	2012-12-20 19:10	2009-08-31	Show	GitHub Exploit DB Packet Storm

228595	7.5	危険	zkup	-	zKup CMS における管理者権限を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-7124	2012-12-20 19:10	2009-08-31	Show	GitHub Exploit DB Packet Storm

228596	6.8	警告	zkup	-	zKup CMS の admin/configuration/modifier.php における任意の PHP コード挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-7123	2012-12-20 19:10	2009-08-31	Show	GitHub Exploit DB Packet Storm

228597	7.5	危険	WeBid Support	-	WeBid auction script の item.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7119	2012-12-20 19:10	2009-08-28	Show	GitHub Exploit DB Packet Storm

228598	5	警告	WeBid Support	-	WeBid auction script における SQL クエリログを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7118	2012-12-20 19:10	2009-08-28	Show	GitHub Exploit DB Packet Storm

228599	5	警告	WeBid Support	-	WeBid auction script の eledicss.php における任意のカスケードスタイルシートファイル (CSS) を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7117	2012-12-20 19:10	2009-08-28	Show	GitHub Exploit DB Packet Storm

228600	7.5	危険	WeBid Support	-	WeBid auction script の admin panel における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7116	2012-12-20 19:10	2009-08-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195241	4.3	MEDIUM Network	cybozu	office	Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspec…	NVD-CWE-Other	CVE-2021-20625	2024-11-21 14:46	2021-03-18	Show	GitHub Exploit DB Packet Storm

195242	6.5	MEDIUM Network	cybozu	office	Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vect…	NVD-CWE-Other	CVE-2021-20624	2024-11-21 14:46	2021-03-18	Show	GitHub Exploit DB Packet Storm

195243	7.4	HIGH Network	redhat	kubernetes-client openshift_container_platform jboss_fuse process_automation descision_manager codeready_studio build_of_quarkus integration_camel_k a-mq_online	A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to ex…	-	CVE-2021-20218	2024-11-21 14:46	2021-03-17	Show	GitHub Exploit DB Packet Storm

195244	4.3	MEDIUM Network	moodle fedoraproject	moodle fedora	The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5,…	CWE-862 Missing Authorization	CVE-2021-20283	2024-11-21 14:46	2021-03-16	Show	GitHub Exploit DB Packet Storm

195245	5.3	MEDIUM Network	moodle fedoraproject	moodle fedora	When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.	-	CVE-2021-20282	2024-11-21 14:46	2021-03-16	Show	GitHub Exploit DB Packet Storm

195246	5.3	MEDIUM Network	moodle fedoraproject	moodle fedora	It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.	CWE-863 Incorrect Authorization	CVE-2021-20281	2024-11-21 14:46	2021-03-16	Show	GitHub Exploit DB Packet Storm

195247	5.4	MEDIUM Network	moodle fedoraproject	moodle fedora	Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.	-	CVE-2021-20280	2024-11-21 14:46	2021-03-16	Show	GitHub Exploit DB Packet Storm

195248	5.4	MEDIUM Network	moodle fedoraproject	moodle fedora	The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.	CWE-79 Cross-site Scripting	CVE-2021-20279	2024-11-21 14:46	2021-03-16	Show	GitHub Exploit DB Packet Storm

195249	2.7	LOW Network	redhat	libnbd enterprise_linux	A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.	-	CVE-2021-20286	2024-11-21 14:46	2021-03-16	Show	GitHub Exploit DB Packet Storm

195250	4.3	MEDIUM Network	ibm	api_connect	IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager …	NVD-CWE-noinfo	CVE-2021-20440	2024-11-21 14:46	2021-03-16	Show	GitHub Exploit DB Packet Storm