Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230561	6.8	警告	phpauction	-	PHPauction GPL における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1416	2012-12-20 18:52	2008-03-20	Show	GitHub Exploit DB Packet Storm

230562	5	警告	riceball	-	MTS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1415	2012-12-20 18:52	2008-03-20	Show	GitHub Exploit DB Packet Storm

230563	4.3	警告	riceball	-	MTS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1414	2012-12-20 18:52	2008-03-20	Show	GitHub Exploit DB Packet Storm

230564	4.3	警告	snews	-	SNewsCMS Rus の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1413	2012-12-20 18:52	2008-03-20	Show	GitHub Exploit DB Packet Storm

230565	7.5	危険	phpbp	-	phpBP の includes/functions/banners-external.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1408	2012-12-20 18:52	2008-03-20	Show	GitHub Exploit DB Packet Storm

230566	4.3	警告	Plone Foundation	-	Plone CMS におけるアカウントへの永久アクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-1396	2012-12-20 18:52	2008-03-19	Show	GitHub Exploit DB Packet Storm

230567	7.5	危険	Plone Foundation	-	Plone CMS におけるログアウトしたセッションを再利用される脆弱性	CWE-287 不適切な認証	CVE-2008-1395	2012-12-20 18:52	2008-03-19	Show	GitHub Exploit DB Packet Storm

230568	7.5	危険	Plone Foundation	-	Plone CMS におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-1394	2012-12-20 18:52	2008-03-19	Show	GitHub Exploit DB Packet Storm

230569	10	危険	Plone Foundation	-	Plone CMS における管理権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-1393	2012-12-20 18:52	2008-03-19	Show	GitHub Exploit DB Packet Storm

230570	4.3	警告	s9y	-	S9Y のインストーラにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1386	2012-12-20 18:52	2008-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196691	7.5	HIGH Network	contiki-ng	contiki-ng	Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loo…	-	CVE-2021-21279	2024-11-21 14:47	2021-06-19	Show	GitHub Exploit DB Packet Storm

196692	7.5	HIGH Network	contiki-ng	contiki-ng	Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do …	-	CVE-2021-21257	2024-11-21 14:47	2021-06-19	Show	GitHub Exploit DB Packet Storm

196693	9.8	CRITICAL Network	contiki-ng	contiki-ng	Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In versions prior to 4.5, buffer overflow can be triggered by an input packet when using either of Contik…	CWE-120 Classic Buffer Overflow	CVE-2021-21282	2024-11-21 14:47	2021-06-19	Show	GitHub Exploit DB Packet Storm

196694	5.9	MEDIUM Network	atomtech	smart_life	The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not verify server certificate properly, which allows man-in-the-mid…	CWE-295 Improper Certificate Validation	CVE-2021-20732	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

196695	8.8	HIGH Adjacent	buffalo	wsr-1166dhp4_firmware wsr-1166dhp3_firmware	WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.	CWE-78 OS Command	CVE-2021-20731	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

196696	4.3	MEDIUM Adjacent	buffalo	wsr-1166dhp4_firmware wsr-1166dhp3_firmware	Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified v…	NVD-CWE-Other	CVE-2021-20730	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

196697	5.3	MEDIUM Network	nttr	goo_blog	Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via t…	NVD-CWE-Other	CVE-2021-20728	2024-11-21 14:47	2021-06-9	Show	GitHub Exploit DB Packet Storm

196698	9.8	CRITICAL Network	sharp-nec-displays	un462a_firmware un462va_firmware un492s_firmware un492vs_firmware un552a_firmware un552s_firmware un552vs_firmware un552_firmware un552v_firmware ux552s_firmware ux552_f…	Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and pri…	CWE-77 CWE-120 Command Injection Classic Buffer Overflow	CVE-2021-20699	2024-11-21 14:47	2021-06-7	Show	GitHub Exploit DB Packet Storm

196699	9.8	CRITICAL Network	sharp-nec-displays	un462a_firmware un462va_firmware un492s_firmware un492vs_firmware un552a_firmware un552s_firmware un552vs_firmware un552_firmware un552v_firmware ux552s_firmware ux552_f…	Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prio…	NVD-CWE-noinfo	CVE-2021-20698	2024-11-21 14:47	2021-06-7	Show	GitHub Exploit DB Packet Storm

196700	6.1	MEDIUM Network	zettlr	zettlr	Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.	CWE-79 Cross-site Scripting	CVE-2021-20727	2024-11-21 14:47	2021-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed