Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230391 2.6 注意 rPath, Inc - rPath Appliance Platform Agent の rootpw プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-2140 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
230392 6.5 警告 rPath, Inc - rPath Appliance Platform Agent の rootpw プラグインにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2139 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
230393 7.5 危険 visualshapers - VisualShapers ezContents における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2135 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
230394 6.8 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおける任意のユーザアカウントへのアクセス権を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2134 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
230395 4.3 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2133 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
230396 7.5 危険 systementor - Systementor PostcardMentor の step1.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2132 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
230397 4.3 警告 tux cms - Tux CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2126 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
230398 4.3 警告 SAP - SAP ITS の WGate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2123 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
230399 7.5 危険 project alumni - Project Alumni の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2118 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230400 4.3 警告 project alumni - Project Alumni の pages/news.page.inc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2117 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196381 6.5 MEDIUM
Network 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may explo… CWE-295
Improper Certificate Validation  		CVE-2021-21571 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
196382 7.5 HIGH
Network 		zte zxv10_b860h_v5.0_firmware A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with th… CWE-276
Incorrect Default Permissions  		CVE-2021-21737 2024-11-21 14:48 2021-06-24 Show GitHub Exploit DB Packet Storm
196383 6.1 MEDIUM
Network 		mongo-express_project mongo-express mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a… - CVE-2021-21422 2024-11-21 14:48 2021-06-22 Show GitHub Exploit DB Packet Storm
196384 9.1 CRITICAL
Network 		contiki-ng contiki-ng Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and pri… - CVE-2021-21410 2024-11-21 14:48 2021-06-19 Show GitHub Exploit DB Packet Storm
196385 9.8 CRITICAL
Network 		jenkins generic_webhook_trigger Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21669 2024-11-21 14:48 2021-06-18 Show GitHub Exploit DB Packet Storm
196386 10.0 CRITICAL
Network 		opener_project opener An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead … CWE-125
Out-of-bounds Read 		CVE-2021-21777 2024-11-21 14:48 2021-06-17 Show GitHub Exploit DB Packet Storm
196387 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission. CWE-79
Cross-site Scripting 		CVE-2021-21668 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196388 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with… CWE-79
Cross-site Scripting 		CVE-2021-21667 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196389 7.5 HIGH
Network 		otrs otrs There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending speciall… CWE-79
Cross-site Scripting 		CVE-2021-21441 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196390 6.7 MEDIUM
Local 		dell poweredge_r640_firmware
poweredge_r740_firmware
poweredge_r740xd_firmware
poweredge_r940_firmware
poweredge_r540_firmware
poweredge_r440_firmware
poweredge_t440_firmware
poweredg… 		Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerabil… CWE-125
Out-of-bounds Read 		CVE-2021-21557 2024-11-21 14:48 2021-06-15 Show GitHub Exploit DB Packet Storm