Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229421	7.5	危険	scripts-for-sites	-	SFS Hotscripts-like Site の software-description.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6237	2012-12-20 19:10	2009-02-23	Show	GitHub Exploit DB Packet Storm

229422	7.5	危険	PreProject.com	-	Pre Shopping Mall における認証を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6232	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229423	7.5	危険	PreProject.com	-	Pre Classified Listing PHP における認証を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6231	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229424	7.5	危険	PreProject.com	-	Pre Projects Pre Podcast Portal の Tour.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6230	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229425	7.5	危険	PreProject.com	-	Pre Multi-Vendor Shopping Malls における管理アクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6228	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229426	7.5	危険	PreProject.com	-	Pre Multi-Vendor Shopping Malls の buyer_detail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6227	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229427	6.8	警告	PreProject.com	-	Pre Projects PHP Auto Listings Script の moreinfo.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6226	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229428	7.5	危険	samelinux	-	WOTW の visualizza.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6224	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229429	7.5	危険	wotw	-	WOTW の visualizza.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6223	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229430	7.5	危険	Cafuego	-	SDMS の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6220	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195451	9.8	CRITICAL Network	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of s…	CWE-415 Double Free	CVE-2021-23158	2024-11-21 14:51	2022-03-17	Show	GitHub Exploit DB Packet Storm

195452	7.5	HIGH Network	oppo	coloros	In ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.	NVD-CWE-noinfo	CVE-2021-23246	2024-11-21 14:51	2022-03-12	Show	GitHub Exploit DB Packet Storm

195453	8.1	HIGH Network	postgresql fedoraproject redhat	postgresql fedora software_collections enterprise_linux enterprise_linux_for_power_little_endian enterprise_linux_for_ibm_z_systems	When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection …	-	CVE-2021-23214	2024-11-21 14:51	2022-03-5	Show	GitHub Exploit DB Packet Storm

195454	5.9	MEDIUM Network	postgresql	postgresql	A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.	-	CVE-2021-23222	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195455	7.8	HIGH Local	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to execute arbitrary code and denial of service.	CWE-787 Out-of-bounds Write	CVE-2021-23206	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195456	7.5	HIGH Network	samba	samba	A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their …	NVD-CWE-noinfo	CVE-2021-23192	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195457	7.8	HIGH Local	htmldoc_project	htmldoc	A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.	CWE-476 NULL Pointer Dereference	CVE-2021-23191	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195458	7.8	HIGH Local	htmldoc_project	htmldoc	A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of service.	CWE-476 NULL Pointer Dereference	CVE-2021-23180	2024-11-21 14:51	2022-03-3	Show	GitHub Exploit DB Packet Storm

195459	6.1	MEDIUM Network	karma_project	karma	The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.	CWE-601 Open Redirect	CVE-2021-23495	2024-11-21 14:51	2022-02-26	Show	GitHub Exploit DB Packet Storm

195460	9.8	CRITICAL Network	object-extend_project	object-extend	The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2021-23702	2024-11-21 14:51	2022-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed