Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 10, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230541 | 4.3 | 警告 | subtextproject | - | Subtext におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-6283 | 2012-12-20 19:10 | 2009-02-25 | Show | GitHub Exploit DB Packet Storm |
| 230542 | 7.8 | 危険 | rakhisoftware | - | RakhiSoftware Price Comparison Script における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2008-6279 | 2012-12-20 19:10 | 2009-02-25 | Show | GitHub Exploit DB Packet Storm |
| 230543 | 4.3 | 警告 | rakhisoftware | - | RakhiSoftware Price Comparison Script の product.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-6278 | 2012-12-20 19:10 | 2009-02-25 | Show | GitHub Exploit DB Packet Storm |
| 230544 | 7.5 | 危険 | rakhisoftware | - | RakhiSoftware Price Comparison Script の product.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6277 | 2012-12-20 19:10 | 2009-02-25 | Show | GitHub Exploit DB Packet Storm |
| 230545 | 6.8 | 警告 | tbmnet | - | TBmnetCMS の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-6271 | 2012-12-20 19:10 | 2009-02-25 | Show | GitHub Exploit DB Packet Storm |
| 230546 | 7.5 | 危険 | sadi samami | - | WEBBDOMAIN Multi Languages WebShop Online の detail.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6268 | 2012-12-20 19:10 | 2009-02-25 | Show | GitHub Exploit DB Packet Storm |
| 230547 | 7.5 | 危険 | ultrastats | - | Ultrastats の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6260 | 2012-12-20 19:10 | 2009-02-24 | Show | GitHub Exploit DB Packet Storm |
| 230548 | 4.3 | 警告 | quadcomm | - | QuadComm Q-Shop の search.asp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-6259 | 2012-12-20 19:10 | 2009-02-24 | Show | GitHub Exploit DB Packet Storm |
| 230549 | 7.5 | 危険 | quadcomm | - | QuadComm Q-Shop の users.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6258 | 2012-12-20 19:10 | 2009-02-24 | Show | GitHub Exploit DB Packet Storm |
| 230550 | 6.5 | 警告 | vBulletin Solutions, Inc. | - | vBulletin の admincp/admincalendar.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6256 | 2012-12-20 19:10 | 2009-02-24 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 10, 2026, 5 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197311 | 7.8 |
HIGH
Local |
microsoft |
excel office_web_apps office_online_server office 365_apps |
Microsoft Excel Remote Code Execution Vulnerability |
CWE-416
Use After Free |
CVE-2021-24070 | 2024-11-21 14:52 | 2021-02-26 | Show | GitHub Exploit DB Packet Storm |
| 197312 | 7.8 |
HIGH
Local |
microsoft |
excel office_web_apps office_online_server office 365_apps |
Microsoft Excel Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2021-24069 | 2024-11-21 14:52 | 2021-02-26 | Show | GitHub Exploit DB Packet Storm |
| 197313 | 7.8 |
HIGH
Local |
microsoft |
excel office_web_apps |
Microsoft Excel Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2021-24068 | 2024-11-21 14:52 | 2021-02-26 | Show | GitHub Exploit DB Packet Storm |
| 197314 | 7.8 |
HIGH
Local |
microsoft |
excel office_web_apps office_online_server office 365_apps |
Microsoft Excel Remote Code Execution Vulnerability |
CWE-416
Use After Free |
CVE-2021-24067 | 2024-11-21 14:52 | 2021-02-26 | Show | GitHub Exploit DB Packet Storm |
| 197315 | 8.8 |
HIGH
Network |
microsoft |
sharepoint_foundation sharepoint_enterprise_server sharepoint_server |
Microsoft SharePoint Remote Code Execution Vulnerability |
CWE-502
Deserialization of Untrusted Data |
CVE-2021-24066 | 2024-11-21 14:52 | 2021-02-26 | Show | GitHub Exploit DB Packet Storm |
| 197316 | 9.8 |
CRITICAL
Network |
botan_project | botan | In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex). |
NVD-CWE-noinfo
|
CVE-2021-24115 | 2024-11-21 14:52 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 197317 | 8.8 |
HIGH
Network |
mcafee | web_gateway | Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance… |
NVD-CWE-Other
|
CVE-2021-23885 | 2024-11-21 14:52 | 2021-02-17 | Show | GitHub Exploit DB Packet Storm |
| 197318 | 9.1 |
CRITICAL
Network |
apache netapp |
nutch snap_creator_framework |
An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web se… |
CWE-611
XXE |
CVE-2021-23901 | 2024-11-21 14:52 | 2021-01-25 | Show | GitHub Exploit DB Packet Storm |
| 197319 | 9.1 |
CRITICAL
Network |
apache netapp debian oracle |
xmlbeans snap_creator_framework snapmanager oncommand_unified_manager_core_package debian_linux peoplesoft_enterprise_peopletools middleware_common_libraries_and_tools |
The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion att… |
CWE-776
XML Entity Expansion |
CVE-2021-23926 | 2024-11-21 14:52 | 2021-01-15 | Show | GitHub Exploit DB Packet Storm |
| 197320 | 5.9 |
MEDIUM
Network |
apache debian oracle |
tomcat debian_linux agile_plm |
When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to … |
CWE-706
Use of Incorrectly-Resolved Name or Reference |
CVE-2021-24122 | 2024-11-21 14:52 | 2021-01-15 | Show | GitHub Exploit DB Packet Storm |