Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230541 | 7.5 | 危険 | siteadmin | - | SiteAdmin の line2.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3414 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230542 | 5 | 警告 | phplinkat | - | phpLinkat における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-3407 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230543 | 7.5 | 危険 | phplinkat | - | TribunaLibre の ftag.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3406 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230544 | 4.3 | 警告 | xrms | - | XRMS CRM における設定情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2008-3400 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230545 | 6.8 | 警告 | xrms | - | XRMS CRM の activities/workflow-activities.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-3399 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230546 | 2.6 | 注意 | xrms | - | XRMS CRM におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3398 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230547 | 4.3 | 警告 | runesoft | - | Runesoft Cerberus CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3397 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230548 | 5.8 | 警告 | webwizguide | - | Web Wiz Forum におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2008-3392 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230549 | 4.3 | 警告 | webwizguide | - | Web Wiz Forum におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3391 | 2012-12-20 18:52 | 2008-07-31 | Show | GitHub Exploit DB Packet Storm |
| 230550 | 7.5 | 危険 | phpfootball | - | PHPFootball の show.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3387 | 2012-12-20 18:52 | 2008-07-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 5, 2026, 4:11 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196191 | 5.4 |
MEDIUM
Network |
f5 | big-ip_advanced_firewall_manager | On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5, authenticated users accessing the Configuration utility for AFM are vulnerable to a cross-site scriptin… |
CWE-79
Cross-site Scripting |
CVE-2021-22983 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196192 | 7.2 |
HIGH
Network |
f5 |
big-ip_domain_name_system big-ip_global_traffic_manager |
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software v… |
CWE-120
Classic Buffer Overflow |
CVE-2021-22982 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196193 | 4.8 |
MEDIUM
Network |
f5 |
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<… |
On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that is mitigated by the Extended Master Secret (EMS) extension defined in … |
NVD-CWE-noinfo
|
CVE-2021-22981 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196194 | 7.8 |
HIGH
Local |
f5 |
big-ip_access_policy_manager access_policy_manager_clients |
In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) fo… |
CWE-426
Untrusted Search Path |
CVE-2021-22980 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196195 | 6.1 |
MEDIUM
Network |
f5 |
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<… |
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS) vulnerability exists in a… |
CWE-79
Cross-site Scripting |
CVE-2021-22979 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196196 | 7.5 |
HIGH
Network |
f5 |
big-ip_application_security_manager big-ip_advanced_web_application_firewall |
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM system processes WebS… |
NVD-CWE-Other
|
CVE-2021-22976 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196197 | 7.5 |
HIGH
Network |
f5 |
big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_firewall big-ip_application_security_manager big-ip_access_policy_manager big-ip_link_controller… |
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while pas… |
NVD-CWE-noinfo
|
CVE-2021-22975 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196198 | 7.5 |
HIGH
Network |
f5 |
big-iq_centralized_management big-ip_advanced_firewall_manager big-ip_fraud_protection_service big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_f… |
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iCo… |
CWE-362
Race Condition |
CVE-2021-22974 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196199 | 7.5 |
HIGH
Network |
f5 |
big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager big-ip_fraud_protection_servi… |
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSON parser function does not protect against out-of-bounds me… |
CWE-787
Out-of-bounds Write |
CVE-2021-22973 | 2024-11-21 14:51 | 2021-02-13 | Show | GitHub Exploit DB Packet Storm |
| 196200 | 7.5 |
HIGH
Network |
is-user-valid_project | is-user-valid | All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure. |
CWE-74
Injection |
CVE-2021-23335 | 2024-11-21 14:51 | 2021-02-11 | Show | GitHub Exploit DB Packet Storm |