Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 2:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229941 4.3 警告 xt:Commerce - xt:Commerce の advanced_search_result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6044 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229942 7.5 危険 phpprobid - PPB における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6043 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229943 7.5 危険 wsnlinks - WSN Links の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6033 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229944 7.5 危険 wsnlinks - WSN Links Free の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6032 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229945 7.5 危険 wsnlinks - WSN Links の vote.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6031 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229946 7.5 危険 university of queensland - University of Queensland Library Fez の list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6028 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229947 7.5 危険 xnova - Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6023 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
229948 7.5 危険 xnova - Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6022 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
229949 7.5 危険 rianxosencabos cms - Rianxosencabos CMS の scripts/links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6014 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
229950 7.5 危険 sg real estate portal - SG Real Estate Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6011 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195731 6.5 MEDIUM
Network 		mozilla firefox An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerabili… NVD-CWE-noinfo
CVE-2021-23956 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195732 6.1 MEDIUM
Network 		mozilla firefox The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox < 85. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-23955 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195733 8.8 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability … CWE-843
Type Confusion 		CVE-2021-23954 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195734 4.3 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects … NVD-CWE-noinfo
CVE-2021-23953 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195735 8.1 HIGH
Network 		mozilla firefox When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be u… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-23976 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195736 6.5 MEDIUM
Network 		mozilla firefox The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof funct… CWE-862
 Missing Authorization 		CVE-2021-23975 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195737 6.1 MEDIUM
Network 		mozilla firefox The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86. NVD-CWE-noinfo
CVE-2021-23974 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195738 6.5 MEDIUM
Network 		mozilla
debian 		firefox
firefox_esr
thunderbird
debian_linux 		When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerab… CWE-209
Information Exposure Through an Error Message 		CVE-2021-23973 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195739 8.8 HIGH
Network 		mozilla firefox One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Firefox will display a warning dialog; howe… NVD-CWE-noinfo
CVE-2021-23972 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
195740 6.5 MEDIUM
Network 		mozilla firefox When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the… NVD-CWE-noinfo
CVE-2021-23971 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm