Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229741 4.3 警告 typosphere - Typo のコメントを残す機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4903 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229742 7.5 危険 scripts frenzy - Article Publisher Pro の contact_author.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4902 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229743 7.5 危険 scripts frenzy - Article Publisher Pro の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4901 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229744 9.3 危険 SAP - SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-4830 2012-12-20 18:52 2009-04-16 Show GitHub Exploit DB Packet Storm
229745 7.5 危険 YourFreeWorld.com - YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4900 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229746 6.8 警告 planetluc - Planetluc RateMe におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4899 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229747 4.3 警告 planetluc - planetluc RateMe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4898 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229748 7.5 危険 YourFreeWorld.com - YourFreeWorld Downline Builder の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4895 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229749 5.1 警告 Tribal Ltd. - Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4894 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
229750 2.6 注意 Tribal Ltd. - Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4893 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195701 7.8 HIGH
Local 		fatek fvdesigner Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code e… CWE-787
 Out-of-bounds Write 		CVE-2021-22683 2024-11-21 14:50 2021-03-4 Show GitHub Exploit DB Packet Storm
195702 7.8 HIGH
Local 		fatek fvdesigner An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may… CWE-824
 Access of Uninitialized Pointer 		CVE-2021-22670 2024-11-21 14:50 2021-03-4 Show GitHub Exploit DB Packet Storm
195703 7.8 HIGH
Local 		fatek fvdesigner Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit … CWE-787
 Out-of-bounds Write 		CVE-2021-22666 2024-11-21 14:50 2021-03-4 Show GitHub Exploit DB Packet Storm
195704 7.8 HIGH
Local 		fatek fvdesigner A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that m… CWE-416
 Use After Free 		CVE-2021-22662 2024-11-21 14:50 2021-03-4 Show GitHub Exploit DB Packet Storm
195705 7.8 HIGH
Local 		fatek fvdesigner Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code ex… CWE-125
Out-of-bounds Read 		CVE-2021-22638 2024-11-21 14:50 2021-03-4 Show GitHub Exploit DB Packet Storm
195706 8.1 HIGH
Network 		github github An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission … NVD-CWE-Other
CVE-2021-22863 2024-11-21 14:50 2021-03-3 Show GitHub Exploit DB Packet Storm
195707 6.5 MEDIUM
Network 		github github An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent… NVD-CWE-Other
CVE-2021-22862 2024-11-21 14:50 2021-03-3 Show GitHub Exploit DB Packet Storm
195708 6.5 MEDIUM
Network 		github github An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically… NVD-CWE-Other
CVE-2021-22861 2024-11-21 14:50 2021-03-3 Show GitHub Exploit DB Packet Storm
195709 7.5 HIGH
Network 		prosoft-technology icx35-hwc-a_firmware
icx35-hwc-e_firmware 		Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the… NVD-CWE-Other
CVE-2021-22661 2024-11-21 14:50 2021-02-27 Show GitHub Exploit DB Packet Storm
195710 9.8 CRITICAL
Network 		advantech bb-eswgp506-2sfp-t_firmware BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary cod… - CVE-2021-22667 2024-11-21 14:50 2021-02-25 Show GitHub Exploit DB Packet Storm