Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228891 7.5 危険 scripts-for-sites - SFS EZ Top Sites の topsite.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6247 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
228892 7.5 危険 scripts-for-sites - SFS EZ Webring の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6246 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
228893 7.5 危険 scripts-for-sites - SFS EZ BIZ PRO の track.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6245 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
228894 7.5 危険 scripts-for-sites - SFS EZ Gaming Cheats の view_reviews.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6244 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
228895 7.5 危険 scripts-for-sites - SFS Hotscripts-like Site の showcategory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6243 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
228896 7.5 危険 scripts-for-sites - SFS EZ e-store の SearchResults.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6242 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
228897 7.5 危険 scripts-for-sites - SFS Hotscripts-like Site の software-description.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6237 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
228898 7.5 危険 PreProject.com - Pre Shopping Mall における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-6232 2012-12-20 19:10 2009-02-20 Show GitHub Exploit DB Packet Storm
228899 7.5 危険 PreProject.com - Pre Classified Listing PHP における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-6231 2012-12-20 19:10 2009-02-20 Show GitHub Exploit DB Packet Storm
228900 7.5 危険 PreProject.com - Pre Projects Pre Podcast Portal の Tour.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6230 2012-12-20 19:10 2009-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195281 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash. - CVE-2021-20272 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
195282 6.1 MEDIUM
Network 		movabletype movable_type_premium
movable_type_premium_advanced
movable_type_advanced
movable_type 		Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Adva… CWE-79
Cross-site Scripting 		CVE-2021-20665 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
195283 6.1 MEDIUM
Network 		movabletype movable_type
movable_type_premium
movable_type_premium_advanced
movable_type_advanced 		Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Se… CWE-79
Cross-site Scripting 		CVE-2021-20664 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
195284 6.1 MEDIUM
Network 		movabletype movable_type
movable_type_premium
movable_type_premium_advanced
movable_type_advanced 		Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced … CWE-79
Cross-site Scripting 		CVE-2021-20663 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
195285 5.4 MEDIUM
Network 		ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management… 		IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially … CWE-79
Cross-site Scripting 		CVE-2021-20351 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
195286 5.4 MEDIUM
Network 		ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management… 		IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially … CWE-79
Cross-site Scripting 		CVE-2021-20350 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
195287 5.4 MEDIUM
Network 		ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management… 		IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially … CWE-79
Cross-site Scripting 		CVE-2021-20340 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
195288 7.5 HIGH
Network 		ibm security_verify_bridge IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, o… CWE-798
 Use of Hard-coded Credentials 		CVE-2021-20442 2024-11-21 14:46 2021-03-4 Show GitHub Exploit DB Packet Storm
195289 5.9 MEDIUM
Network 		ibm security_verify_bridge IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196617. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2021-20441 2024-11-21 14:46 2021-03-4 Show GitHub Exploit DB Packet Storm
195290 8.2 HIGH
Local 		gnu
redhat
fedoraproject
netapp 		grub2
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_tus
enterprise_linux_server_eus
fedora
ontap_select_deploy_administration_… 		A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 … CWE-787
 Out-of-bounds Write 		CVE-2021-20233 2024-11-21 14:46 2021-03-4 Show GitHub Exploit DB Packet Storm