Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230451	6	警告	PHP-Fusion	-	PHP-Fusion の submit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1918	2012-12-20 18:52	2008-04-23	Show	GitHub Exploit DB Packet Storm

230452	7.5	危険	w2b	-	W2B Online Banking の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1893	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230453	5	警告	Ruby-lang.org	-	Ruby の WEBrick におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1891	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230454	7.5	危険	xplodphp	-	XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1889	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230455	5	警告	wikepage	-	Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1884	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

230456	6.8	警告	VideoLAN	-	VLC の ParseSSA 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1881	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230457	7.5	危険	Xine	-	xine-lib の src/demuxers/demux_nsf.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1878	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230458	6.8	警告	snarky	-	VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1876	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230459	7.5	危険	terong	-	Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1875	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230460	6.5	警告	xpoze	-	Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1874	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196401	4.3	MEDIUM Network	gitlab	gitlab	An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests	CWE-863 Incorrect Authorization	CVE-2021-22176	2024-11-21 14:49	2021-03-25	Show	GitHub Exploit DB Packet Storm

196402	7.8	HIGH Local	huawei	manageone	There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitat…	NVD-CWE-noinfo	CVE-2021-22314	2024-11-21 14:49	2021-03-23	Show	GitHub Exploit DB Packet Storm

196403	7.2	HIGH Network	huawei	manageone	There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow c…	CWE-276 Incorrect Default Permissions	CVE-2021-22311	2024-11-21 14:49	2021-03-23	Show	GitHub Exploit DB Packet Storm

196404	5.3	MEDIUM Network	huawei	nip6300_firmware nip6600_firmware nip6800_firmware s12700_firmware s1700_firmware s2700_firmware s5700_firmware s6700_firmware s7700_firmware s9700_firmware secospace_us…	There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious opera…	CWE-416 Use After Free	CVE-2021-22321	2024-11-21 14:49	2021-03-23	Show	GitHub Exploit DB Packet Storm

196405	7.5	HIGH Network	huawei	ips_module_firmware ngfw_module_firmware nip6600_firmware nip6800_firmware secospace_usg6300_firmware secospace_usg6500_firmware secospace_usg6600_firmware	There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affe…	NVD-CWE-noinfo	CVE-2021-22320	2024-11-21 14:49	2021-03-23	Show	GitHub Exploit DB Packet Storm

196406	4.4	MEDIUM Local	huawei	nip6300_firmware nip6600_firmware secospace_usg6300_firmware secospace_usg6500_firmware secospace_usg6600_firmware usg9500_firmware	There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2021-22310	2024-11-21 14:49	2021-03-23	Show	GitHub Exploit DB Packet Storm

196407	7.5	HIGH Network	huawei	usg9500_firmware usg9520_firmware usg9560_firmware usg9580_firmware	There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive mess…	CWE-330 Use of Insufficiently Random Values	CVE-2021-22309	2024-11-21 14:49	2021-03-23	Show	GitHub Exploit DB Packet Storm

196408	8.8	HIGH Network	wireshark oracle debian	wireshark zfs_storage_appliance debian_linux	Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.	CWE-74 Injection	CVE-2021-22191	2024-11-21 14:49	2021-03-16	Show	GitHub Exploit DB Packet Storm

196409	4.3	MEDIUM Network	elastic oracle	elasticsearch communications_cloud_native_core_automated_test_suite	A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions whe…	CWE-863 Incorrect Authorization	CVE-2021-22134	2024-11-21 14:49	2021-03-9	Show	GitHub Exploit DB Packet Storm

196410	4.3	MEDIUM Network	fortinet	fortiproxy	An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on…	NVD-CWE-Other	CVE-2021-22128	2024-11-21 14:49	2021-03-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed