Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230411 6.8 警告 pnflashgames - PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2013 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
230412 7.5 危険 postnuke software foundation - PostNuke 用の PostSchedule モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2012 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
230413 7.5 危険 サン・マイクロシステムズ - Sun Java System Directory Proxy Server におけるサーバに対するアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1995 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
230414 4.3 警告 pixel motion - Blog Pixel Motion の liste_article.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1986 2012-12-20 18:52 2008-04-27 Show GitHub Exploit DB Packet Storm
230415 8.5 危険 サン・マイクロシステムズ - Sun Ray Kiosk Mode におけるルートの権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-2112 2012-12-20 18:52 2008-05-5 Show GitHub Exploit DB Packet Storm
230416 9.3 危険 Yahoo! - Yahoo! Assistant の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2111 2012-12-20 18:52 2008-05-7 Show GitHub Exploit DB Packet Storm
230417 7.5 危険 qto - QTOFileManager の qtofm.php における任意の PHP コードをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2110 2012-12-20 18:52 2008-05-7 Show GitHub Exploit DB Packet Storm
230418 7.5 危険 phpforge - PHP Forge の admin/news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2088 2012-12-20 18:52 2008-05-6 Show GitHub Exploit DB Packet Storm
230419 6.8 警告 softbiz - Softbiz Web Host Directory Script の search_result.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2087 2012-12-20 18:52 2008-05-6 Show GitHub Exploit DB Packet Storm
230420 6.8 警告 prozilla - Prozilla Hosting Index の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2083 2012-12-20 18:52 2008-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196501 6.5 MEDIUM
Network 		sap business_warehouse The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database ta… CWE-862
 Missing Authorization 		CVE-2021-21468 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196502 4.3 MEDIUM
Network 		sap banking_services SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. An unauthorized User is allowed to display… CWE-862
 Missing Authorization 		CVE-2021-21467 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196503 9.9 CRITICAL
Network 		sap business_warehouse The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can include their own SQL commands which the datab… CWE-89
SQL Injection 		CVE-2021-21465 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196504 4.3 MEDIUM
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-20
 Improper Input Validation  		CVE-2021-21464 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196505 4.4 MEDIUM
Local 		sap enterprise_performance_management SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which… CWE-611
XXE 		CVE-2021-21470 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196506 7.5 HIGH
Network 		sap netweaver_master_data_management When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in th… CWE-200
Information Exposure 		CVE-2021-21469 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196507 8.8 HIGH
Network 		sap bw\/4hana
business_warehouse 		SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module… CWE-94
Code Injection 		CVE-2021-21466 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196508 8.8 HIGH
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-125
Out-of-bounds Read 		CVE-2021-21463 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196509 8.8 HIGH
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-787
 Out-of-bounds Write 		CVE-2021-21462 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196510 8.8 HIGH
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-787
 Out-of-bounds Write 		CVE-2021-21461 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm