Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230201	7.5	危険	Powie	-	Powie pNews の newskom.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4347	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

230202	7.5	危険	talkback	-	TalkBack におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4346	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

230203	7.5	危険	webportal	-	WebPortal CMS の download.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4345	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

230204	6	警告	vacilanda	-	Drupal 用の Brilliant Gallery モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4338	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

230205	7.5	危険	phpocs	-	phpOCS の library/pagefunctions.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4331	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

230206	5.8	警告	ViewVC	-	ViewVC の lib/viewvc.py におけるブラウザにコンテンツを誤って解釈させる脆弱性	CWE-noinfo 情報不足	CVE-2008-4325	2012-12-20 18:52	2008-06-4	Show	GitHub Exploit DB Packet Storm

230207	10	危険	project-observer	-	Observer における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4318	2012-12-20 18:52	2008-09-29	Show	GitHub Exploit DB Packet Storm

230208	9	危険	phpCollab	-	phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-4305	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

230209	10	危険	phpCollab	-	phpCollab の general/login.php における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2008-4304	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

230210	6.8	警告	phpCollab	-	phpCollab における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4303	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196111	6.1	MEDIUM Network	schneider-electric	network_management_card_2_firmware network_management_card_3_firmware	A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessin…	CWE-79 Cross-site Scripting	CVE-2021-22811	2024-11-21 14:50	2022-01-29	Show	GitHub Exploit DB Packet Storm

196112	6.1	MEDIUM Network	schneider-electric	network_management_card_2_firmware network_management_card_3_firmware	A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a …	CWE-79 Cross-site Scripting	CVE-2021-22810	2024-11-21 14:50	2022-01-29	Show	GitHub Exploit DB Packet Storm

196113	7.0	HIGH Local	linux debian netapp	linux_kernel debian_linux h410c_firmware h300s_firmware h500s_firmware h700s_firmware h410s_firmware	A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past t…	CWE-415 Double Free	CVE-2021-22600	2024-11-21 14:50	2022-01-26	Show	GitHub Exploit DB Packet Storm

196114	5.5	MEDIUM Local	google debian fedoraproject oracle netapp	protobuf debian_linux fedora mysql snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager	Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error m…	CWE-476 NULL Pointer Dereference	CVE-2021-22570	2024-11-21 14:50	2022-01-26	Show	GitHub Exploit DB Packet Storm

196115	9.8	CRITICAL Network	google	fuchsia	An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to b…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-22566	2024-11-21 14:50	2022-01-18	Show	GitHub Exploit DB Packet Storm

196116	5.5	MEDIUM Local	google oracle	protobuf-kotlin protobuf-java google-protobuf communications_cloud_native_core_console communications_cloud_native_core_policy communications_cloud_native_core_network_repository_funct…	An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser fo…	NVD-CWE-noinfo	CVE-2021-22569	2024-11-21 14:50	2022-01-10	Show	GitHub Exploit DB Packet Storm

196117	3.5	LOW Network	dart	dart_software_development_kit	Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacke…	NVD-CWE-Other	CVE-2021-22567	2024-11-21 14:50	2022-01-5	Show	GitHub Exploit DB Packet Storm

196118	9.8	CRITICAL Network	myscada	mypro	mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.	-	CVE-2021-22657	2024-11-21 14:50	2021-12-24	Show	GitHub Exploit DB Packet Storm

196119	8.8	HIGH Network	dart	dart_software_development_kit	When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. U…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2021-22568	2024-11-21 14:50	2021-12-10	Show	GitHub Exploit DB Packet Storm

196120	6.5	MEDIUM Network	google	exposure_notification_verification_server	An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading …	NVD-CWE-Other	CVE-2021-22565	2024-11-21 14:50	2021-12-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed