Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230281	4.3	警告	telephone	-	Telephone Directory 2008 の edit1.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2677	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

230282	4.3	警告	softcomplex	-	PHP Image Gallery の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2675	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

230283	7.5	危険	Powie	-	Powie pNews の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2673	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

230284	7.5	危険	y-blog	-	yBlog における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2669	2012-12-20 18:52	2008-06-11	Show	GitHub Exploit DB Packet Storm

230285	4.3	警告	y-blog	-	yBlog におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2668	2012-12-20 18:52	2008-06-11	Show	GitHub Exploit DB Packet Storm

230286	7.5	危険	smeweb	-	SMEWeb の catalog.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2652	2012-12-20 18:52	2008-06-10	Show	GitHub Exploit DB Packet Storm

230287	4.3	警告	smeweb	-	SMEWeb における任意の Web スクリプトまたは HTML を挿入される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2644	2012-12-20 18:52	2008-06-10	Show	GitHub Exploit DB Packet Storm

230288	7.5	危険	theflashblog	-	FlashBlog の php/leer_comentarios.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2572	2012-12-20 18:52	2008-06-6	Show	GitHub Exploit DB Packet Storm

230289	4.3	警告	samtodo	-	SamTodo の dsp_main.php などにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2563	2012-12-20 18:52	2008-06-6	Show	GitHub Exploit DB Packet Storm

230290	6.5	警告	powerphlogger	-	PowerPhlogger の edCss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2562	2012-12-20 18:52	2008-06-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196311	3.3	LOW Local	dell	wyse_management_suite	Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticated attacker could exploit this vulnerability in order to obtain the path of file…	CWE-200 Information Exposure	CVE-2021-21587	2024-11-21 14:48	2021-07-16	Show	GitHub Exploit DB Packet Storm

196312	6.5	MEDIUM Network	dell	wyse_management_suite	Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary file…	CWE-22 Path Traversal	CVE-2021-21586	2024-11-21 14:48	2021-07-16	Show	GitHub Exploit DB Packet Storm

196313	6.7	MEDIUM Local	dell	emc_unity_operating_environment emc_unityvsa_operating_environment emc_unity_xt_operating_environment	Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to…	CWE-522 Insufficiently Protected Credentials	CVE-2021-21591	2024-11-21 14:48	2021-07-13	Show	GitHub Exploit DB Packet Storm

196314	6.7	MEDIUM Local	dell	emc_unity_operating_environment emc_unityvsa_operating_environment emc_unity_xt_operating_environment	Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to…	CWE-522 Insufficiently Protected Credentials	CVE-2021-21590	2024-11-21 14:48	2021-07-13	Show	GitHub Exploit DB Packet Storm

196315	6.7	MEDIUM Local	dell	emc_unity_operating_environment emc_unityvsa_operating_environment emc_unity_xt_operating_environment	Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. A local authenticated Service user could potentially exploit this vulnerability to escalat…	NVD-CWE-Other	CVE-2021-21589	2024-11-21 14:48	2021-07-13	Show	GitHub Exploit DB Packet Storm

196316	4.3	MEDIUM Network	dell	powerflex_presentation_server	Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by trickin…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2021-21588	2024-11-21 14:48	2021-07-13	Show	GitHub Exploit DB Packet Storm

196317	7.8	HIGH Local	accusoft	imagegear	An out-of-bounds write vulnerability exists in the TIF bits_per_sample processing functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to memory corruption. An attack…	CWE-787 Out-of-bounds Write	CVE-2021-21794	2024-11-21 14:48	2021-07-8	Show	GitHub Exploit DB Packet Storm

196318	8.8	HIGH Network	accusoft	imagegear	An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing functionality of Accusoft ImageGear 19.8 and 19.9. A specially crafted malformed file can lead to memory corruptio…	CWE-787 Out-of-bounds Write	CVE-2021-21793	2024-11-21 14:48	2021-07-8	Show	GitHub Exploit DB Packet Storm

196319	8.8	HIGH Network	webkitgtk fedoraproject debian	webkitgtk fedora debian_linux	A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further…	CWE-416 Use After Free	CVE-2021-21779	2024-11-21 14:48	2021-07-8	Show	GitHub Exploit DB Packet Storm

196320	8.0	HIGH Network	webkitgtk fedoraproject debian	webkitgtk fedora debian_linux	A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak…	CWE-416 Use After Free	CVE-2021-21775	2024-11-21 14:48	2021-07-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed