Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229831 7.5 危険 rgallery - WBB 用の rGallery プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4627 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229832 6.8 警告 zirkon box - Fritz Berger yappa-ng の yappa-ng におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4626 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229833 7.5 危険 shiftthis - WordPress 用の ShiftThis Newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4625 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229834 5 警告 Wireshark - Wireshark の Bluetooth ACL 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4683 2012-12-20 18:52 2007-04-4 Show GitHub Exploit DB Packet Storm
229835 7.5 危険 phpfastnews - phpFastNews の fastnews-code.php における認証を迂回される脆弱性 CWE-287
不適切な認証 		CVE-2008-4622 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229836 7.5 危険 ZeeScripts.com - ZeeScripts Zeeproperty の bannerclick.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4621 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229837 10 危険 サン・マイクロシステムズ - Sun Solaris の RPC サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-4619 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229838 7.5 危険 pyxicom - Joomla! 用の actualite モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4617 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229839 5 警告 the spanner
WordPress.org		 - WordPress の SpamBam プラグインにおける制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4616 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229840 10 危険 portalapp - PortalApp の i_utils.asp における脆弱性 CWE-noinfo
情報不足 		CVE-2008-4615 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195781 8.8 HIGH
Network 		accusoft imagegear A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious… CWE-787
 Out-of-bounds Write 		CVE-2021-21939 2024-11-21 14:49 2022-04-15 Show GitHub Exploit DB Packet Storm
195782 8.8 HIGH
Network 		accusoft imagegear A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a m… CWE-193
 Off-by-one Error 		CVE-2021-21938 2024-11-21 14:49 2022-04-15 Show GitHub Exploit DB Packet Storm
195783 8.8 HIGH
Network 		accusoft imagegear A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide … CWE-190
 Integer Overflow or Wraparound 		CVE-2021-21914 2024-11-21 14:49 2022-04-15 Show GitHub Exploit DB Packet Storm
195784 5.3 MEDIUM
Network 		vmware photon_os The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries. CWE-74
Injection 		CVE-2021-22055 2024-11-21 14:49 2022-04-12 Show GitHub Exploit DB Packet Storm
195785 8.0 HIGH
Adjacent 		fortinet forticlient An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the… CWE-78
OS Command  		CVE-2021-22127 2024-11-21 14:49 2022-04-7 Show GitHub Exploit DB Packet Storm
195786 7.5 HIGH
Network 		abb base_software
compact_product_suite
control_builder_safe
800xa 		Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker… CWE-20
 Improper Input Validation  		CVE-2021-22277 2024-11-21 14:49 2022-04-2 Show GitHub Exploit DB Packet Storm
195787 5.3 MEDIUM
Network 		cloudfoundry capi-release
cf-deployment 		In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to timeout and fail is … CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22100 2024-11-21 14:49 2022-03-26 Show GitHub Exploit DB Packet Storm
195788 7.5 HIGH
Network 		huawei magic_ui
emui
harmonyos 		There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows. CWE-190
 Integer Overflow or Wraparound 		CVE-2021-22319 2024-11-21 14:49 2022-02-26 Show GitHub Exploit DB Packet Storm
195789 7.5 HIGH
Network 		vmware esxi
cloud_foundation 		ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service condition by overwhelm… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-22050 2024-11-21 14:49 2022-02-17 Show GitHub Exploit DB Packet Storm
195790 7.5 HIGH
Network 		vmware esxi
fusion 		VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit this issue to escal… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2021-22043 2024-11-21 14:49 2022-02-17 Show GitHub Exploit DB Packet Storm