Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230401 4.4 警告 Scriptsez.net - ScriptsEZ.net Power Editor の editor.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2116 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230402 4.3 警告 Scriptsez.net - ScriptsEZ.net Power Editor の editor.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2115 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230403 7.5 危険 PreProject.com - Pre Shopping Mall の emall/search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2114 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230404 7.5 危険 phpeasydata - PHPEasyData の annuaire.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2113 2012-12-20 18:52 2008-05-8 Show GitHub Exploit DB Packet Storm
230405 5 警告 vicftps - VicFTPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2031 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
230406 5.8 警告 RSAセキュリティ - Web の IIS 用の RSA Authentication Agent におけるオープンリダイレクトの脆弱性 CWE-200
情報漏えい 		CVE-2008-2027 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
230407 4.3 警告 RSAセキュリティ - RSA Authentication Agent の WebID/IISWebAgentIF.dll におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2026 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
230408 7.5 危険 Simple Machines - SMF における CAPTCHA のテストを通過される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2019 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
230409 4 警告 phpizabi - PHPizabi の template.class.php の AssignUser 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2018 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
230410 9.3 危険 watchfire - WatchFire AppScan の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2015 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196381 6.5 MEDIUM
Network 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may explo… CWE-295
Improper Certificate Validation  		CVE-2021-21571 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
196382 7.5 HIGH
Network 		zte zxv10_b860h_v5.0_firmware A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with th… CWE-276
Incorrect Default Permissions  		CVE-2021-21737 2024-11-21 14:48 2021-06-24 Show GitHub Exploit DB Packet Storm
196383 6.1 MEDIUM
Network 		mongo-express_project mongo-express mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a… - CVE-2021-21422 2024-11-21 14:48 2021-06-22 Show GitHub Exploit DB Packet Storm
196384 9.1 CRITICAL
Network 		contiki-ng contiki-ng Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and pri… - CVE-2021-21410 2024-11-21 14:48 2021-06-19 Show GitHub Exploit DB Packet Storm
196385 9.8 CRITICAL
Network 		jenkins generic_webhook_trigger Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21669 2024-11-21 14:48 2021-06-18 Show GitHub Exploit DB Packet Storm
196386 10.0 CRITICAL
Network 		opener_project opener An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead … CWE-125
Out-of-bounds Read 		CVE-2021-21777 2024-11-21 14:48 2021-06-17 Show GitHub Exploit DB Packet Storm
196387 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission. CWE-79
Cross-site Scripting 		CVE-2021-21668 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196388 5.4 MEDIUM
Network 		jenkins scriptler Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with… CWE-79
Cross-site Scripting 		CVE-2021-21667 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196389 7.5 HIGH
Network 		otrs otrs There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending speciall… CWE-79
Cross-site Scripting 		CVE-2021-21441 2024-11-21 14:48 2021-06-16 Show GitHub Exploit DB Packet Storm
196390 6.7 MEDIUM
Local 		dell poweredge_r640_firmware
poweredge_r740_firmware
poweredge_r740xd_firmware
poweredge_r940_firmware
poweredge_r540_firmware
poweredge_r440_firmware
poweredge_t440_firmware
poweredg… 		Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerabil… CWE-125
Out-of-bounds Read 		CVE-2021-21557 2024-11-21 14:48 2021-06-15 Show GitHub Exploit DB Packet Storm