Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229571	6.8	警告	phparanoid	-	PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-5672	2012-12-20 19:10	2008-12-18	Show	GitHub Exploit DB Packet Storm

229572	6.8	警告	Textpattern	-	Textpattern におけるセッションのハイジャック後パスワードを変更される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-5670	2012-12-20 19:10	2008-12-18	Show	GitHub Exploit DB Packet Storm

229573	5	警告	Textpattern	-	Textpattern のコメントプレビューセクションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-5669	2012-12-20 19:10	2008-12-18	Show	GitHub Exploit DB Packet Storm

229574	4.3	警告	Textpattern	-	Textpattern におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5668	2012-12-20 19:10	2008-12-18	Show	GitHub Exploit DB Packet Storm

229575	5	警告	VirusBlokAda Ltd.	-	VirusBlokAda VBA32 Personal Antivirus のスキャンエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5667	2012-12-20 19:10	2008-12-18	Show	GitHub Exploit DB Packet Storm

229576	3.5	注意	WING FTP software	-	WinFTP FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5666	2012-12-20 18:52	2008-12-18	Show	GitHub Exploit DB Packet Storm

229577	7.5	危険	XOOPS	-	XOOPS の xhresim モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5665	2012-12-20 18:52	2008-12-18	Show	GitHub Exploit DB Packet Storm

229578	9.3	危険	Realtek Semiconductor Corp	-	Realtek Media Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5664	2012-12-20 18:52	2008-12-18	Show	GitHub Exploit DB Packet Storm

229579	7.5	危険	Quassel IRC	-	Quassel Core における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-5657	2012-12-20 18:52	2008-10-27	Show	GitHub Exploit DB Packet Storm

229580	4.3	警告	TYPO3 Association	-	TYPO3 の felogin system エクステンション用の frontend プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5656	2012-12-20 18:52	2008-12-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195651	6.5	MEDIUM Network	nextcloud fedoraproject	nextcloud_server fedora	A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.	CWE-862 Missing Authorization	CVE-2021-22877	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195652	7.5	HIGH Network	nodejs fedoraproject netapp oracle siemens	node.js fedora snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager e-series_performance_analyzer peoplesoft_enterprise_peopletools graalvm …	Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordi…	NVD-CWE-Other	CVE-2021-22884	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195653	7.5	HIGH Network	nodejs fedoraproject netapp oracle siemens	node.js fedora e-series_performance_analyzer peoplesoft_enterprise_peopletools graalvm nosql_database mysql_cluster jd_edwards_enterpriseone_tools sinec_infrastructure_network…	Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of …	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2021-22883	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195654	9.8	CRITICAL Network	rockwellautomation	factorytalk_services_platform rslogix_5000 studio_5000_logix_designer	Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactL…	CWE-522 Insufficiently Protected Credentials	CVE-2021-22681	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195655	7.8	HIGH Local	fatek	fvdesigner	Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code e…	CWE-787 Out-of-bounds Write	CVE-2021-22683	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195656	7.8	HIGH Local	fatek	fvdesigner	An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may…	CWE-824 Access of Uninitialized Pointer	CVE-2021-22670	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195657	7.8	HIGH Local	fatek	fvdesigner	Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit …	CWE-787 Out-of-bounds Write	CVE-2021-22666	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195658	7.8	HIGH Local	fatek	fvdesigner	A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that m…	CWE-416 Use After Free	CVE-2021-22662	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195659	7.8	HIGH Local	fatek	fvdesigner	Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code ex…	CWE-125 Out-of-bounds Read	CVE-2021-22638	2024-11-21 14:50	2021-03-4	Show	GitHub Exploit DB Packet Storm

195660	8.1	HIGH Network	github	github	An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission …	NVD-CWE-Other	CVE-2021-22863	2024-11-21 14:50	2021-03-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed