Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230251 7.5 危険 phpraider - Simple Machines phpRaider の authentication/smf/smf.functions.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2769 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230252 3.5 注意 xigla - Xigla Poll Manager XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2768 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230253 6.5 警告 xigla - Xigla Poll Manager XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2767 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230254 4.3 警告 xigla - Xigla Absolute Image Gallery XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2766 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230255 7.5 危険 xigla - Xigla Absolute Image Gallery XE の gallery.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2765 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230256 3.5 注意 xigla - Xigla Absolute Live Support XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2764 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230257 6.5 警告 xigla - Xigla Absolute Live Support XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2763 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230258 6.5 警告 xigla - Xigla Absolute Form Processor XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2762 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230259 3.5 注意 xigla - Xigla Absolute Banner Manager XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2761 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230260 6.5 警告 xigla - Xigla Absolute Banner Manager XE の searchbanners.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2760 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196301 8.8 HIGH
Local 		dell powerscale_onefs Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of … NVD-CWE-Other
CVE-2021-21553 2024-11-21 14:48 2021-08-3 Show GitHub Exploit DB Packet Storm
196302 5.5 MEDIUM
Local 		dell emc_networker Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information Disclosure in Log Files vulnerability. A local low-privileged user of the Networker server could potentiall… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2021-21546 2024-11-21 14:48 2021-07-30 Show GitHub Exploit DB Packet Storm
196303 10.0 CRITICAL
Network 		dell idrac9_firmware Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerabilit… CWE-287
Improper Authentication 		CVE-2021-21538 2024-11-21 14:48 2021-07-30 Show GitHub Exploit DB Packet Storm
196304 4.3 MEDIUM
Network 		otrs otrs Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1 and later versions. OT… NVD-CWE-noinfo
CVE-2021-21443 2024-11-21 14:48 2021-07-26 Show GitHub Exploit DB Packet Storm
196305 5.4 MEDIUM
Network 		otrs time_accounting In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x ve… CWE-79
Cross-site Scripting 		CVE-2021-21442 2024-11-21 14:48 2021-07-26 Show GitHub Exploit DB Packet Storm
196306 6.5 MEDIUM
Network 		otrs otrs Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS … NVD-CWE-noinfo
CVE-2021-21440 2024-11-21 14:48 2021-07-26 Show GitHub Exploit DB Packet Storm
196307 6.5 MEDIUM
Network 		combodo itop Combodo iTop is an open source, web based IT Service Management tool. Prior to version 2.7.4, the CSRF token validation can be bypassed through iTop portal via a tricky browser procedure. The vulnera… CWE-352
 Origin Validation Error 		CVE-2021-21407 2024-11-21 14:48 2021-07-22 Show GitHub Exploit DB Packet Storm
196308 8.8 HIGH
Network 		combodo itop Combodo iTop is an open source, web based IT Service Management tool. In versions prior to 2.7.4, there is a command injection vulnerability in the Setup Wizard when providing Graphviz executable pat… CWE-77
Command Injection 		CVE-2021-21406 2024-11-21 14:48 2021-07-22 Show GitHub Exploit DB Packet Storm
196309 6.1 MEDIUM
Network 		advantech r-seenet Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). If a user visits a specially crafted URL, it can lead to arbitrary Jav… CWE-79
Cross-site Scripting 		CVE-2021-21800 2024-11-21 14:48 2021-07-16 Show GitHub Exploit DB Packet Storm
196310 6.1 MEDIUM
Network 		advantech r-seenet Cross-site scripting vulnerabilities exist in the telnet_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). If a user visits a specially crafted URL, it can lead to arbitrary … CWE-79
Cross-site Scripting 		CVE-2021-21799 2024-11-21 14:48 2021-07-16 Show GitHub Exploit DB Packet Storm