Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229091 2.1 注意 RivetCode Software - RivetTracker におけるパスワードを特定される脆弱性 CWE-310
暗号の問題
CVE-2008-7207 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
229092 4.3 警告 stefan ritt - ELOG における脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-7206 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
229093 4.3 警告 VirtueMart - VirtueMart の製品ビュー機能における任意のファイルを読み取られる脆弱性 CWE-20
不適切な入力確認
CVE-2008-7205 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
229094 6.8 警告 VirtueMart - VirtueMart におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7204 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
229095 5 警告 valve software - Valve Software Half-Life Counter-Strike におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-7203 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
229096 6.8 警告 PHPKIT - PHPKIT におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7193 2012-12-20 19:10 2009-09-9 Show GitHub Exploit DB Packet Storm
229097 6.8 警告 woltlab - wBB の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7192 2012-12-20 19:10 2009-09-9 Show GitHub Exploit DB Packet Storm
229098 5 警告 pps.jussieu - Polipo におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2008-7191 2012-12-20 19:10 2009-09-9 Show GitHub Exploit DB Packet Storm
229099 5 警告 rittwick banerjee - Telephone Directory 2008 の del_query1.php における任意の連絡先を削除される脆弱性 CWE-20
不適切な入力確認
CVE-2008-7180 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
229100 7.5 危険 XOOPS - XOOPS 用の Uploader モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-7178 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195071 6.1 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI. CWE-79
Cross-site Scripting
CVE-2021-23929 2024-11-21 14:52 2021-01-13 Show GitHub Exploit DB Packet Storm
195072 6.1 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string. CWE-79
Cross-site Scripting
CVE-2021-23928 2024-11-21 14:52 2021-01-13 Show GitHub Exploit DB Packet Storm
195073 6.4 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2021-23927 2024-11-21 14:52 2021-01-13 Show GitHub Exploit DB Packet Storm
195074 9.1 CRITICAL
Network
ivanti avalanche An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. NVD-CWE-noinfo
CVE-2021-22962 2024-11-21 14:51 2023-12-20 Show GitHub Exploit DB Packet Storm
195075 7.5 HIGH
Network
odoo odoo Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via cr… NVD-CWE-Other
CVE-2021-23203 2024-11-21 14:51 2023-04-26 Show GitHub Exploit DB Packet Storm
195076 8.7 HIGH
Network
odoo odoo A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents of other tenants, in a multi-tena… NVD-CWE-noinfo
CVE-2021-23186 2024-11-21 14:51 2023-04-26 Show GitHub Exploit DB Packet Storm
195077 7.5 HIGH
Network
odoo odoo Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that belongs to another us… NVD-CWE-noinfo
CVE-2021-23178 2024-11-21 14:51 2023-04-26 Show GitHub Exploit DB Packet Storm
195078 6.5 MEDIUM
Network
odoo odoo Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting infor… NVD-CWE-noinfo
CVE-2021-23176 2024-11-21 14:51 2023-04-26 Show GitHub Exploit DB Packet Storm
195079 8.7 HIGH
Network
odoo odoo A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server. NVD-CWE-noinfo
CVE-2021-23166 2024-11-21 14:51 2023-04-26 Show GitHub Exploit DB Packet Storm
195080 5.5 MEDIUM
Local
sox_project sox A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash. - CVE-2021-23210 2024-11-21 14:51 2022-08-26 Show GitHub Exploit DB Packet Storm