Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230451 7.5 危険 xplodphp - XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1889 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230452 5 警告 wikepage - Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1884 2012-12-20 18:52 2008-04-18 Show GitHub Exploit DB Packet Storm
230453 6.8 警告 VideoLAN - VLC の ParseSSA 関数 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1881 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230454 7.5 危険 Xine - xine-lib の src/demuxers/demux_nsf.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1878 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230455 6.8 警告 snarky - VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1876 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230456 7.5 危険 terong - Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1875 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230457 6.5 警告 xpoze - Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1874 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230458 4.3 警告 tru-zone - Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1873 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230459 6.5 警告 scriptsagent - Scriptsagent.com Links Directory の links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1871 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230460 7.5 危険 site sift media - Site Sift Listings における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1869 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196501 6.5 MEDIUM
Network 		sap business_warehouse The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database ta… CWE-862
 Missing Authorization 		CVE-2021-21468 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196502 4.3 MEDIUM
Network 		sap banking_services SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. An unauthorized User is allowed to display… CWE-862
 Missing Authorization 		CVE-2021-21467 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196503 9.9 CRITICAL
Network 		sap business_warehouse The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can include their own SQL commands which the datab… CWE-89
SQL Injection 		CVE-2021-21465 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196504 4.3 MEDIUM
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-20
 Improper Input Validation  		CVE-2021-21464 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196505 4.4 MEDIUM
Local 		sap enterprise_performance_management SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which… CWE-611
XXE 		CVE-2021-21470 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196506 7.5 HIGH
Network 		sap netweaver_master_data_management When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in th… CWE-200
Information Exposure 		CVE-2021-21469 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196507 8.8 HIGH
Network 		sap bw\/4hana
business_warehouse 		SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module… CWE-94
Code Injection 		CVE-2021-21466 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196508 8.8 HIGH
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-125
Out-of-bounds Read 		CVE-2021-21463 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196509 8.8 HIGH
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-787
 Out-of-bounds Write 		CVE-2021-21462 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm
196510 8.8 HIGH
Network 		sap 3d_visual_enterprise_viewer SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavaila… CWE-787
 Out-of-bounds Write 		CVE-2021-21461 2024-11-21 14:48 2021-01-13 Show GitHub Exploit DB Packet Storm