Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229531	10	危険	proxim	-	Proxim Wireless Tsunami における重要な情報を取得される脆弱性	CWE-94 コード・インジェクション	CVE-2008-5866	2012-12-20 19:10	2009-01-7	Show	GitHub Exploit DB Packet Storm

229532	7.5	危険	v-gn	-	wBB 用の Userlocator モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5863	2012-12-20 19:10	2009-01-6	Show	GitHub Exploit DB Packet Storm

229533	5	警告	webcamxp	-	webcamXP におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5862	2012-12-20 19:10	2009-01-6	Show	GitHub Exploit DB Packet Storm

229534	4	警告	シックス・アパート株式会社	-	Six Apart MT におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5846	2012-12-20 19:10	2009-01-5	Show	GitHub Exploit DB Packet Storm

229535	7.5	危険	phpicalendar	-	PHP iCalendar における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5840	2012-12-20 19:10	2009-01-5	Show	GitHub Exploit DB Packet Storm

229536	6.8	警告	web scribble solutions	-	Web Scribble Solutions webClassifieds の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5817	2012-12-20 19:10	2009-01-2	Show	GitHub Exploit DB Packet Storm

229537	7.5	危険	phpalumni	-	phpAlumni の Acomment.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5815	2012-12-20 19:10	2009-01-2	Show	GitHub Exploit DB Packet Storm

229538	7.5	危険	SPIP	-	SPIP の inc/rubriques.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5813	2012-12-20 19:10	2008-12-24	Show	GitHub Exploit DB Packet Storm

229539	10	危険	SPIP	-	SPIP における脆弱性	CWE-noinfo 情報不足	CVE-2008-5812	2012-12-20 19:10	2008-12-24	Show	GitHub Exploit DB Packet Storm

229540	4.3	警告	TestLink Development Team	-	TestLink におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5807	2012-12-20 19:10	2008-12-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195491	4.8	MEDIUM Network	flatcore	flatcore	An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An admin user can inject…	CWE-79 Cross-site Scripting	CVE-2021-23836	2024-11-21 14:51	2021-01-15	Show	GitHub Exploit DB Packet Storm

195492	4.9	MEDIUM Network	flatcore	flatcore	An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP request body parameter for the acp interface. This can be exploi…	CWE-20 Improper Input Validation	CVE-2021-23835	2024-11-21 14:51	2021-01-15	Show	GitHub Exploit DB Packet Storm

195493	6.1	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple com_tags views cause lead to XSS attack vectors.	CWE-79 Cross-site Scripting	CVE-2021-23125	2024-11-21 14:51	2021-01-13	Show	GitHub Exploit DB Packet Storm

195494	6.1	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.	CWE-79 Cross-site Scripting	CVE-2021-23124	2024-11-21 14:51	2021-01-13	Show	GitHub Exploit DB Packet Storm

195495	5.3	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of com_modules leak names of unpublished and/or inaccessible modules.	CWE-862 Missing Authorization	CVE-2021-23123	2024-11-21 14:51	2021-01-13	Show	GitHub Exploit DB Packet Storm

195496	7.8	HIGH Local	sudo_project netapp fedoraproject	sudo solidfire hci_management_node fedora	selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary …	CWE-59 Link Following	CVE-2021-23240	2024-11-21 14:51	2021-01-12	Show	GitHub Exploit DB Packet Storm

195497	2.5	LOW Local	sudo_project netapp fedoraproject debian	sudo cloud_backup solidfire hci_management_node fedora debian_linux	The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled…	CWE-59 Link Following	CVE-2021-23239	2024-11-21 14:51	2021-01-12	Show	GitHub Exploit DB Packet Storm

195498	5.3	MEDIUM Network	opera	opera_mini	Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With t…	NVD-CWE-Other	CVE-2021-23253	2024-11-21 14:51	2021-01-12	Show	GitHub Exploit DB Packet Storm

195499	5.3	MEDIUM Network	mercusys	mercury_x18g_firmware	MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.	CWE-22 Path Traversal	CVE-2021-23242	2024-11-21 14:51	2021-01-8	Show	GitHub Exploit DB Packet Storm

195500	5.3	MEDIUM Network	mercusys	mercury_x18g_firmware	MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web server, as demonstrated by the /loginLess…	CWE-22 Path Traversal	CVE-2021-23241	2024-11-21 14:51	2021-01-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed