Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 5, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230431 | 9.3 | 危険 | telartis bv | - | AWStats Totals の awstatstotals.php における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-3922 | 2012-12-20 18:52 | 2008-09-4 | Show | GitHub Exploit DB Packet Storm |
| 230432 | 4.3 | 警告 | telartis bv | - | AWStats Totals におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3921 | 2012-12-20 18:52 | 2008-09-4 | Show | GitHub Exploit DB Packet Storm |
| 230433 | 10 | 危険 | princeton university | - | Princeton wn におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-3908 | 2012-12-20 18:52 | 2008-09-4 | Show | GitHub Exploit DB Packet Storm |
| 230434 | 2.1 | 注意 | suspend2 | - | Software suspend における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2008-3901 | 2012-12-20 18:52 | 2008-09-3 | Show | GitHub Exploit DB Packet Storm |
| 230435 | 2.1 | 注意 | TrueCrypt Foundation | - | TrueCrypt における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2008-3899 | 2012-12-20 18:52 | 2008-09-3 | Show | GitHub Exploit DB Packet Storm |
| 230436 | 2.1 | 注意 | secustar | - | Secu Star DriveCrypt Plus Pack における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2008-3898 | 2012-12-20 18:52 | 2008-09-3 | Show | GitHub Exploit DB Packet Storm |
| 230437 | 10 | 危険 | ZoneMinder | - | ZoneMinder における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-3882 | 2012-12-20 18:52 | 2008-09-2 | Show | GitHub Exploit DB Packet Storm |
| 230438 | 4.3 | 警告 | ZoneMinder | - | ZoneMinder におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3881 | 2012-12-20 18:52 | 2008-09-2 | Show | GitHub Exploit DB Packet Storm |
| 230439 | 7.5 | 危険 | ZoneMinder | - | ZoneMinder の zm_html_view_event.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3880 | 2012-12-20 18:52 | 2008-09-2 | Show | GitHub Exploit DB Packet Storm |
| 230440 | 9.3 | 危険 | ultrashareware | - | Ultra Shareware Ultra Office Control の Ultra.OfficeControl ActiveX コントロールにおけるクライアントシステムに任意のファイルを強制ダウンロードされる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-3879 | 2012-12-20 18:52 | 2008-09-2 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 5, 2026, 4:11 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196191 | 5.4 |
MEDIUM
Network |
f5 | big-ip_advanced_firewall_manager | On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5, authenticated users accessing the Configuration utility for AFM are vulnerable to a cross-site scriptin… |
CWE-79
Cross-site Scripting |
CVE-2021-22983 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196192 | 7.2 |
HIGH
Network |
f5 |
big-ip_domain_name_system big-ip_global_traffic_manager |
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software v… |
CWE-120
Classic Buffer Overflow |
CVE-2021-22982 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196193 | 4.8 |
MEDIUM
Network |
f5 |
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<… |
On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that is mitigated by the Extended Master Secret (EMS) extension defined in … |
NVD-CWE-noinfo
|
CVE-2021-22981 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196194 | 7.8 |
HIGH
Local |
f5 |
big-ip_access_policy_manager access_policy_manager_clients |
In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) fo… |
CWE-426
Untrusted Search Path |
CVE-2021-22980 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196195 | 6.1 |
MEDIUM
Network |
f5 |
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<… |
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS) vulnerability exists in a… |
CWE-79
Cross-site Scripting |
CVE-2021-22979 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196196 | 7.5 |
HIGH
Network |
f5 |
big-ip_application_security_manager big-ip_advanced_web_application_firewall |
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM system processes WebS… |
NVD-CWE-Other
|
CVE-2021-22976 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196197 | 7.5 |
HIGH
Network |
f5 |
big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_firewall big-ip_application_security_manager big-ip_access_policy_manager big-ip_link_controller… |
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while pas… |
NVD-CWE-noinfo
|
CVE-2021-22975 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196198 | 7.5 |
HIGH
Network |
f5 |
big-iq_centralized_management big-ip_advanced_firewall_manager big-ip_fraud_protection_service big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_f… |
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iCo… |
CWE-362
Race Condition |
CVE-2021-22974 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196199 | 7.5 |
HIGH
Network |
f5 |
big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager big-ip_fraud_protection_servi… |
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSON parser function does not protect against out-of-bounds me… |
CWE-787
Out-of-bounds Write |
CVE-2021-22973 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196200 | 7.5 |
HIGH
Network |
is-user-valid_project | is-user-valid | All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure. |
CWE-74
Injection |
CVE-2021-23335 | 2024-11-21 14:51 | 2021-02-11 | Show | GitHub Exploit DB Packet Storm |